last executing test programs:

3.664453468s ago: executing program 3 (id=1716):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x92, 0xff, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7fefb, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x155000, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="8f38e62a0451", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xb77, 0x0, 0x0, 0x0, 0x2f, 0x7, @loopback, @remote}, '=\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0afdffffff0000000007006800", @ANYRES32=r3, @ANYBLOB="000900001020000024001a800900010076ec616e000000001400048010"], 0x44}}, 0x4050)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

3.460550579s ago: executing program 3 (id=1719):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
socket$netlink(0x10, 0x3, 0x7)
getsockopt$inet_int(r3, 0x10d, 0xd0, &(0x7f0000000340), &(0x7f0000000080)=0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x6, 0x6, 0x4}, {0x4, 0x6, 0xa, 0x5}, {0x7, 0x85, 0x7, 0xa5}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x3}]}}}]}, 0x44}}, 0x0)

3.166040301s ago: executing program 3 (id=1723):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000002, 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x0, 0xfffffffffffffdfe, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r3})

2.840422509s ago: executing program 1 (id=1728):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="2daa00000900000071101300000000009500000000000000cd0186c0ef78f3bda66aea3dbaee9baf1e0d3cd880300cd8ae0760d565bf27f6c5a05ab7d710d559cd2bdc210887c647aa093afa0c801472f12f7999839dea014a66ab45c0d295796d28006dfed6d8f51aaaecc82a3c65ab7d7b7c428d29465be2047fed0309354d6ae0ee57ae7be7486d188dbc408a06fa6a9a0acb4827f2168b4333c5390d32cf7fdba016fd66639fc5102ab4097c8f4cabda9ce05081d1624da093b8357e824d77b5486ea2dcef3569796b4eba2ffcdd0bd4a819578cc75d49819c1dfe386f7b4003e5c7feb5b0ac14ab00000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0xb, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6a}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f23}]}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001980)=[{0x4, 0x1, 0x1, 0x8}, {0x3, 0x4, 0x3, 0xc}], 0x10, 0x7fff, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCRTMSG(r9, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @broadcast}, 0xb4, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x1, 0x2})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000a3f502dc306b7ba4dbb04b21a7a50318586a75d9c748450aa18c4fcb15dddf77b0742b7919c1e2d99a90d0e939afa5e06f52060d050dddba4fe00c0f09e2b238f17652f72151fe6948b1a274765670cb07b91e5ab8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50)

2.620615901s ago: executing program 1 (id=1731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x7f)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000400)=0x700, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="895cd80ca2b5a083b2e128fec895f8038a4f83c4c97ae480acf3c840f39561a5e4aae8d575227f2e0382673c25e199bd13baed7cae345501a1bdac7fa14dedf5", @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x2c841}, 0x81)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x31)
close(0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xf00)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x7)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0xa43531a02e0465ec, 0x56dc, 0x6f}, 0x2c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b0, &(0x7f0000000040)={'bond0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000d40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000300)=r7)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0afdffffff0000000007006800", @ANYRES32=r9, @ANYBLOB="000900001020000024001a800900010076ec616e0000000004000480"], 0x44}}, 0x4050)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"5bbaaaadfeff0695f90265597ad4c225", r7, r11, {0x7, 0xfc06}, {0xa, 0x8}, 0xfffffffffffffff7, [0x0, 0x3, 0x10, 0x4, 0x9e, 0x2e68, 0x792, 0x3ff, 0x1, 0x6, 0x9, 0x80, 0x2, 0xffffffffffffffff, 0x401, 0x9]})

2.313027091s ago: executing program 4 (id=1733):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000a00)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.172608763s ago: executing program 2 (id=1734):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000140)="3fa89fc58e964a12fe6ceb207c9ad6d9853fa2d4540e3d67a0dba3f41a0061de420470059f9410408e7b13bb04d0c5115ca40f6cf6481eab2152e2b426c0730140d22c3da8b4d632db5534036a528d2694d3ca8b6a3cfe947753e86d9b8be5eb048ef0b6e253b4b66c3a5f2a3bc9124d98292521c1db8b93bd21e86d2b82767e3ed5d9", &(0x7f00000002c0)=""/193, &(0x7f0000000540)="717927fbe930dfa3a384827c4ee9cadf12a82032f7a1a2d8f9db6bcfe85c4e87a385200b6a19b20a0df2bef295e8f25652e15d4e9ea251cca61316f9b1db4f61608d4bb1f472be282421e62104dbc27dc649accb139436668ad52e66245507e601e86b7a886ec1cc2bf70b48e6633cfd44082a4972f33bdd54f4b2b28cd0439322bc2fbf21aaef5b1ecddfe2257001d186be26262931ac1fdd3bdc3a7a17", &(0x7f00000003c0)="f71f50169024ee2b205661d1d5f83566c7b79782ee9f53a5e2483874b85b2b5c12eca15b2778eaf13623e73d439471c1ee53441f5b9034945d862eec8c7374b7ad9e54d99da563e264bf440bed6c7ca8c6fef677d089597dbc19015148a145f097dfcdd0c7fe38972baa3b9962d8a1", 0x9f3, r0, 0x4}, 0x38)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x73554777094dcf2c}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)

2.171727114s ago: executing program 3 (id=1735):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
unshare(0xc040480)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
unshare(0x42000000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100000000000000401ba30dacaf8a4000000000000a20001a00000a05000000000000000000010000000900010073797a300000000040000000030a010129bb9695942506007a0000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800024000000003080001400000000308000b40000000000900010073797a3000000000140000001100010000000000c6123205190d875ac45832262a6299c94e31a3c04d4dff73b1"], 0xd4}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0xb4, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeae84675}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x3, 0x100000, 0x2, 0x8890, 0xffffff7f, 0x31, 0x9, 0x0, 0x335d, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x1, 0x40, 0xffffffff, 0x2, 0x4, 0x7, 0x8, 0x8, 0x9a4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}]}]}, 0xb4}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000009400000094000000060000000b00000000000002000000000f0000000000000a040000000a00000005000006040000000a000000040000000b000000030000000a000000000000000e000000000000000d00000002000000000000000100000d000000001000000003000000000000000500000d0000000005000000010000000400000000000000ffffffff0500000000000000000000000e00000004020000000000005f0022b48fd96dfdcc880ab2855732344b1451cd90866e63038c1aeded3175040b8d5ffd96cfb06bbb44bd1ff4cb9351b3fbc990aaa5f515f3a7189c3828b421f854780ccf23ad7d3cbc7c2ad5a4af2c9ccdc0729bcaed6a8ef43bc21eda90632952ca92e1fe50b3edbb5a88b901537ca4cbacb7720f5425ce83a979a61e0e1f5cd0b0b7e8a91a3955a627ab463d0c3f8a49bf1a36123701c09077a69d99115e10fe9651ecacd300000000a105c1d8640083aa5c2a06c5627df92ed3948284d9423768aaabcb39bbf8"], &(0x7f0000000180), 0xb2, 0x0, 0x0, 0x7, 0x0, @void, @value}, 0x28)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, <r8=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@expire={0x1e8, 0x18, 0x300, 0x70bd29, 0x25dfdbff, {{{@in6=@private1, @in6=@empty, 0x4e23, 0x22, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x2e, r1, r8}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x5, 0xa, 0x6, 0x80, 0xb924, 0x2, 0x5d03, 0x81}, {0x1, 0x2, 0x6, 0x2}, {0x80000001, 0x1, 0x3}, 0x70bd25, 0x3505, 0x2, 0x1c017c891ce4ce4c, 0x3, 0x26}, 0x6}, [@algo_auth={0xce, 0x1, {{'wp384-generic\x00'}, 0x430, "39d4545198bdb02c127f6cbe5e6abd15d4cbcec7cad9ba0862767cb941e075695a3992fc772e1f6c4e056ef8879f9d104826863b9faebc9059f413ca14489b440578b94a44d2854c2d4bda8b61d502d75bcb5803f814d0e97bba7dceff750e272ee29a05017b9856b9908d58d970e0a660a0f4140be1b8070caeeb211eb1d67fb4320365f5cf"}}, @offload={0xc, 0x1c, {r1, 0x2}}, @coaddr={0x14, 0xe, @in6=@private1}]}, 0x1e8}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', r1, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x93, 0x8}, 0xc)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="f74a8ddd6d334b3a2a9743fc0f0b"}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8001)
bind$llc(r12, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a)
sendfile(r12, r13, 0x0, 0xffffffff000)

2.106856777s ago: executing program 0 (id=1736):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x238, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @mcast2, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'vlan0\x00', 'veth0_to_batadv\x00', {}, {}, 0x32, 0x94, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "094093b37cd589be20f97bbb709e46cef75dcfb9482a06d80cc259379472"}}, {{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff], 'syz_tun\x00', 'bond0\x00', {}, {}, 0x2c, 0x6, 0x3, 0x22}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x32) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000002"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000037c00001000458004000880080009"], 0x24}}, 0x4040040) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000600000008"], 0x14}}, 0x50)

2.053111544s ago: executing program 4 (id=1737):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', <r2=>0x0})
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fef59503de00000000000000000000bb", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0)

1.972642191s ago: executing program 1 (id=1738):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r2}, 0x3f)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0x6d4, 0x6, 0x4004, 0xffffffffffffffff, 0x87f0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xb, @void, @value, @void, @value}, 0x50)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10)

1.968832969s ago: executing program 2 (id=1739):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={<r5=>0x0, 0x7, 0x4, 0x30000}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={r5, 0x7}, &(0x7f0000000340)=0x8)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x949}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x99}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x3}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}]}, 0xf8}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})

1.927206947s ago: executing program 0 (id=1740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010001fff28bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="12030000000000001c0012800b00010067656e65766500000c00028005000d000100000008000a00", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000400)
ioctl$PPPIOCGL2TPSTATS(r3, 0x40047452, 0xfffffffffffffffd)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
write(r0, &(0x7f00000036c0)="da52e35c2d83f6b1d3dd2f2a7c3e34a9f04472e98999aa8be4d2c8ba83165b0fda270be15b7e6843895253dd6b54b82a292143507bbf64de680aae4eb7d3f9ff4b929fa07f239cc41b59088956e606f1135a437b908b2fcf2e166a7b48d5eb2519a498f52b4024686a17d9dfb5c747f106a66c1abe5230c92933a05a2a39f25ca5315377e06305be45573fc4aacb0fe002884622ce5c3a3be721b613836cfa5c1310d56e6551aac971efc1383edf85ebcf62035d7689b3a89daa526f140a0ec533a1504a6689d96f25c09999", 0xcc)
syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r13=>0x0})
recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, &(0x7f00000013c0)=""/244, 0xf4}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000014c0)=""/193, 0xc1}], 0x1, &(0x7f00000015c0)=""/201, 0xc9}, 0x7}, {{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000140)=[{&(0x7f00000016c0)=""/207, 0xcf}], 0x1, &(0x7f00000017c0)=""/98, 0x62}, 0x8}, {{&(0x7f0000001840)=@x25={0x9, @remote}, 0x80, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/16, 0x10}], 0x1, &(0x7f0000002ec0)=""/48, 0x30}, 0x6}, {{&(0x7f0000001980)=@qipcrtr, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001a80)=""/184, 0xb8}, {&(0x7f0000001a00)=""/14, 0xe}, {&(0x7f0000001b40)=""/185, 0xb9}, {&(0x7f0000001c00)=""/63, 0x3f}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x5, &(0x7f0000002cc0)=""/25, 0x19}, 0x7}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002d00)=""/141, 0x8d}, {&(0x7f0000002dc0)=""/23, 0x17}, {&(0x7f0000002e00)=""/100, 0x64}, {&(0x7f0000002e80)=""/46, 0x2e}, {&(0x7f00000037c0)=""/196, 0xc4}], 0x5}, 0x6}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003040)}, {&(0x7f0000003080)=""/248, 0xf8}, {&(0x7f0000003180)=""/193, 0xc1}, {&(0x7f0000003280)=""/32, 0x20}, {&(0x7f00000032c0)}, {&(0x7f0000003300)=""/188, 0xbc}, {&(0x7f00000033c0)=""/119, 0x77}], 0x7}, 0x1}], 0x7, 0x1, &(0x7f0000003680)={0x0, 0x989680})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002f00)=ANY=[@ANYBLOB="0931125717adf1a1d1b4c180b05c0e832da306f99c0cc1fbf5ab7c4db831fcf7d3d69dcb8a5e01d4c362a9a4520efcc51a4d0d4e9d46e3c7933a0abad438b39abcf20c93c37a484968c6f8843c241cf48257fde9409364095587b0", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf257500000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x20000880)

1.794381278s ago: executing program 2 (id=1741):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/93, 0x327800, 0x1000, 0x0, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
socket$kcm(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x5000)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x10286, 0x4)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)

1.678257678s ago: executing program 1 (id=1742):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001400)=0x3d70, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r2, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r3, 0x4, r4}, 0x10)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

1.677523764s ago: executing program 4 (id=1743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='module_request\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000002080))
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100005ff2cbd7000fcdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001"], 0x3c}}, 0x0)

1.540581841s ago: executing program 0 (id=1744):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)={0x8, {{0xa, 0x4e24, 0x1c46, @local, 0x3}}}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
sendfile(0xffffffffffffffff, r0, 0x0, 0xffefffff)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xc, '\x00', [@ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x3a, 0x52, "15a229eb6f47c95c05d11fb8d64e6d870bff186ff1a153bb4e2491ba72172857ec160a95ddcb5e8b624e9de6d01d8e34a1b27bc9a0e04b9408cb8a309bb1807a035ea49b5246bbaa314ec208c723e31a76ae"}, @jumbo={0xc2, 0x4, 0xff}, @pad1]}, 0x70)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34}]}, &(0x7f0000002100)=0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000200)={0x2, 0x4})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000000180)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5, 0x413, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x7, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0)
listen(r5, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

1.466994552s ago: executing program 2 (id=1745):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3ff}, 0x8) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0)

1.301142995s ago: executing program 2 (id=1746):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x700000000000000, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
listen(r0, 0x6)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

1.1403705s ago: executing program 4 (id=1747):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000a00)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa8, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

995.460123ms ago: executing program 1 (id=1748):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff)
close(0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10008020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd, 0x32}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "20d60eb0ea6d7a5b8ca1ffbd32"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe5}, @ETHTOOL_A_EEE_MODES_OURS={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "b722e88750322e5d9a9a1afeff9bcb170f73beeec1d912bfd247c80d508a20b69671f864a085c78a0e56ff5a7e38878891b842e9624c34cb76cff7c58228dc62016fc7f41bb2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)

977.173681ms ago: executing program 4 (id=1749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010069797a30000000002c000000030a01020002000000000000010000090900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000016140000001100210000000000dfffffffffffff09dd01a604afb533c795"], 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)

796.2167ms ago: executing program 4 (id=1750):
r0 = getpid()
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
listen(r3, 0x6) (async)
listen(r3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, 0x0, 0x0) (async)
connect$inet(r5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), r7)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast})
socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
r8 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x51)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080))

448.209062ms ago: executing program 3 (id=1751):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x800, 0x9)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000400020024000e"], 0x4c}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="c39b1f901d1c1f0892ae19f52aa06737f4f7aa3c5f000d3efa995718c919ea8bd35e2f537c99dcb7ea56acd9ba243a8f712fe7307cd0b7eb1284b0e17b15653e05fdac3d06468992b86b91601e9190c743d9af9ff968b32979f22829b95d9a0a46510884b87ea474dcb9fd88ab4bc6680ab557c3f61d9b8dfca0654d336b6a3576e2618af250865925f196084198e800d6d959ff96bc677e91bfa2e049258acdd5a46b1f0e686024", @ANYRES64=0x0], 0x20)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}}}, 0x108)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x5, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d6200000000000000030006000000000002000000ac141400000000000000000002000100100000000000060000000000030005000000000002004e20000000000000a63294fc6e24"], 0xe0}, 0x1, 0x7}, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4000007, 0x2, 0xff, 0x8, 0x200}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r9, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r10], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

447.852354ms ago: executing program 0 (id=1752):
r0 = epoll_create1(0x80000)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x84a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x814, 0x2b, 0x0, @empty, @local, {[@dstopts={0x89, 0x100, '\x00', [@ra, @generic={0x0, 0x7fa, "1247dea3ebd4fc7bd5709fd4b24e7b351135539e58dabafc2ade2c67b7d4dc7af9683a74dffa1d599f867f7eb800605240523c52f1c1611bf2cb3d7211ae6dda5662a5524498a0e38c982131951eb76549de2592e48f22e509ad59da8a475e6c6a28673a76f5861991b19fa17105e4e65549a8345ec1973c5a95a9ceb0893366e04aa22a3e51cf12307ffedf7b94645cb7a2cd3f8ee224137e306602153cb043b7817b248b4e3b61623ec6d4d256aca7b8d81b42eb8cd741c768cc2ab3cdc1ee3baea5254c244a1fb36704a5d219885eee02454533fb94ae2d16d4e64b183a448bfd34affc4d102566ca27b31ccc0f9a55b3b93ee4db96db8806fa9b75dbc0de38786b586cc4f946b6b2cce27973f76c74a8b808dfccf3a6dce53a62070622eda5b826d88d5bdd590cdc649e47cef0259f9182f74e358294be51ed31947ae6dbc3f2bc7fc1913404d6a8aff046017514c23f790c31c8e49999de250e881612d7387db0cd04067c80ba89e0d239bd9fc03b09624bf06dd768862ca974114f792403bc3b9cdf68b040f9312e0a06369cbeece95b9d3d941fed57105b063c5ea829d602e59a7ef5a9a0cc7fdb96ed0ce02d3b85fbc91a4e2e0b84839531c2c495f6187df2d2db9a92df359a2a43b1d3052b794fff4d7174468f424f09674754832abb20185f36c927a70c9c2889ea338d8560dec5224d3da3efd170d7fe579617aeb2ae61b624bb2a4960f72a067abd0824308646c777379065f41a4108a37fb377f7858308069db09689af853946ce74efd2fad69ade4fef5414b5d46a2064fd1ee5042c430f7a626bbcc0bad29ce720c19c937dba783ec017fa0a5141d023fa875ba0e265e02d43ba0939b3d75d034b240c8c1b09a8bf02a75ee7f098a716389929757d41460dc776ee05ab627571a1b9763f0e2d5d4084a20c37a43fb97411f321913b9f35de77ab857942f025f4c3f108fc94c92aa1dab24d255a66de4c784a56a2bf72bea167bfbc24250636a7aaea40c1b1519473d6ed74df68dacde43ae6761b793d9e4186760e402e85fcacb03bcd8960a7425adca5d8729f3ec59a774507dc035170899e062d9745aa54033ecf87cdf14d42fcfcf2b12c22ddd33cab43d3d5ab93ecc15643cdf9c013222bdda17a3dcbb7049b4cdead5d95d0528012ffec06aad3e8ef75551e3c68f03730ff53d29f42101fa656ea72b75b30ae5dc5583a07ecea7f718476c9c6edcbb5c7906f3013a8c231d3d4209f439cbade7ff1f1dc3365a86585180e83c3863866973bd72bac6ccc77c8a286c7db373fdc5b4d64ac32bfd0bf92455a4abc27ea412e89d3339a9e6d671a77108aaa87cb0637ccfc6eb8c999cfa621953c2ef894237e0cb354b8edb0df9509edec66993656b0cbada67c5d91b944b4cf1ea3ea6e116aa326d0d1b8b6d1bd2fdd8769476be3a4d6873eb223de9cecfaa825b4098d4ba5c8b2ca03a51e9f9e942389c3c9076eeafa564c7a9fcde7d5db328cdc70d3b1d9672593d2221d0732509993d7600768a65599c1939c01802b42587bd6e78004df0673deb229f8108bde46c5f63bc0874fdfb101335567cc49efb6e29cbdd5edb682f5df80cf63210fd779910bcf904a683f87f4b41caf5fe16a5dcf257de288536ec4ebb3cd44f854da2dc3582ea79d64b621dc57ef7c46d9345e4682aed427fc1ce9f82aed370e7fa93f659cfef80d3cb5e47316007f9babd4804a3d82e5ce525bd9888ac27158d24d807d2dc79faa5b173628d2fa33bda70cf8f397c80ea8f76a41edb5a9bbd23de7c006c2e3a3e3225dc5b80b70ee944968b457ca5a6d60a695de83d27c4d80779e48ce801ae7d9c4f01e558a7563bf075e5148afc9ffae19d43a17fecb3340bec25011f4b63db8ebbfde400c10c05f8da95fdac25c5cb419e12322213adf5b5cd11bcb1a15ac1b7b240d4fe2049981af910cde0ba090c4c51f667ef3809763c83ba1e3047a901298fa55cb8b14bb257852a572511ef1bb2709b9c4bf6b204aabc018bb65f5cf629b525bcb9586b5336daaf8692c4866d79cb788c01e670f229dc4a615a2b25c32ec5556f0e4146ca993f673065267b3c09eabe6f81cd831526fcb74c4e6f86164c043380ced3327f770e0d14403662e37e63342e2959e71fc602dd3d42bd7a56af55c1674ad85694d1798327d2ead24d16cf5905f5679d8090c5af35fde9561a42ca304974d6b4cf4a20ddb77c7143d65e67744d6423a55f8c9f54ab8e2e620b07ac67bb6758f8578f48de1f4fb63c7a75c1290aff9c3e27e8e6b31c8222d3f018aa11fd64600d7cb5605f7cfd4a86052e32eef11f400a33816d31bcfa7120f7abf1c6be01ec0686d3ffbc77d53d72b697abe8d28eda81bee7512e57cd359879711c0cb4c61c1ec4c8d043beea2e5faae680e310df48d974111b46fefa5edd0b5b64eb9bc158633581253a643d378a013b4e234d7bf48357c810c877ed6e3b21bff25a09b15cc3713bdcd9b9a41c880b4d3842eebd9312b7cd19da42972aa0392ed070f99d212e44b30be74568300fea186de554062e594e8f757fdce7b26bb61875069a660d51483de8da431e2c464b300052b8f59bfc41e41238a083e67be997d1ca016d176f8fc04c2e9e280f18e171abcb430603161c25fb594a4d79e46ea0521ca9b20e8582be743c2fc228f8ee6976924f25293814e6a9fd477e9bc81244301837a8657c0ab96671cca99a7c1284ff9346aac51002630900cbc349090172958fe9a39ae08a898d5eda8d9300ea07934e3ed87411c491ea8cf56034f0076d3765d13118d0e47d31e927a8f35b295d41dcdac3dade9fc94b436aabd638a380e0aadbfeb7a6daece277fd99dc79ed924b9ea5f063616e3d3d588008f"}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000020000000000000000ee000095", @ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

304.621948ms ago: executing program 0 (id=1753):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001a00210d00040000000000000a0000000000000000000100"], 0x24}}, 0xc090) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

281.566402ms ago: executing program 2 (id=1754):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r0, 0xcd44a000)
openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000000306010100000000000000000700000a0900020073797a3100000000050001000700000005000100070000000900020073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x20040841}, 0x14000000)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_dump={0x3e, 0x1000, 0x2}})
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb010018000000001200000100000000000007000000000200000001000005000100000a0000000100000000000000005f2e010000000000006100"/72], &(0x7f0000001540)=""/88, 0x48, 0x58, 0x1, 0x0, 0x0, @void, @value}, 0x28)
getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

132.524153ms ago: executing program 3 (id=1755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40030000, 0x0, 0x3f, 0x0, 0x1, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0xfffe, 0x2}, {0x0, 0x4, 0xfc}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x8}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xf}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
r5 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r5, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket(0x1e, 0x3, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f0000000900)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast, {[@cipso={0x86, 0x3d, 0x0, [{0x2, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x6, '\x00\x00\x00\x00'}, {0x7, 0x5, "8475be"}]}]}}}}}}}, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

100.27297ms ago: executing program 0 (id=1756):
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x3e000000, @mcast2}}}, 0x88)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
syz_init_net_socket$ax25(0x3, 0x3, 0x6)
socket$inet6_udplite(0xa, 0x2, 0x88)

0s ago: executing program 1 (id=1757):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x58}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$packet(0x11, 0xa, 0x300) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x58}}, 0x0) (async)

kernel console output (not intermixed with test programs):

HW filter on device bond0
[   79.170510][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   79.216090][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   79.227240][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.234675][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.255961][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.277336][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.284515][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.308411][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.333299][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.340488][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.350347][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.357504][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.407034][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.440120][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   79.451572][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   79.518599][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.525907][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.536963][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.544259][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.559470][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.566637][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.593183][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   79.621587][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.628785][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.647910][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.655480][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.687726][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.694901][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.709710][ T5838] Bluetooth: hci1: command tx timeout
[   79.776554][ T5838] Bluetooth: hci0: command tx timeout
[   79.783036][ T5838] Bluetooth: hci2: command tx timeout
[   79.801286][ T5848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.812923][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.854041][ T5838] Bluetooth: hci3: command tx timeout
[   79.859519][ T5147] Bluetooth: hci4: command tx timeout
[   79.916311][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.950249][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.079420][ T5835] veth0_vlan: entered promiscuous mode
[   80.121122][ T5835] veth1_vlan: entered promiscuous mode
[   80.218888][ T5835] veth0_macvtap: entered promiscuous mode
[   80.249439][ T5835] veth1_macvtap: entered promiscuous mode
[   80.340538][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.381663][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.409891][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.428617][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.442344][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.451862][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.461218][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.511706][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.549068][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.600865][ T5849] veth0_vlan: entered promiscuous mode
[   80.648868][ T5849] veth1_vlan: entered promiscuous mode
[   80.716359][ T5843] veth0_vlan: entered promiscuous mode
[   80.722820][ T5848] veth0_vlan: entered promiscuous mode
[   80.764944][ T5840] veth0_vlan: entered promiscuous mode
[   80.777936][ T5840] veth1_vlan: entered promiscuous mode
[   80.789389][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.797628][ T5843] veth1_vlan: entered promiscuous mode
[   80.817770][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.855683][ T5848] veth1_vlan: entered promiscuous mode
[   80.871749][ T5849] veth0_macvtap: entered promiscuous mode
[   80.885457][ T5849] veth1_macvtap: entered promiscuous mode
[   80.905785][  T458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.916395][  T458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.937851][ T5840] veth0_macvtap: entered promiscuous mode
[   80.957348][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.973188][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.986426][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.008406][ T5840] veth1_macvtap: entered promiscuous mode
[   81.026625][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.037625][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.050999][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.061102][ T5843] veth0_macvtap: entered promiscuous mode
[   81.097167][ T5843] veth1_macvtap: entered promiscuous mode
[   81.111659][ T5848] veth0_macvtap: entered promiscuous mode
[   81.142100][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.142618][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.168043][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.177362][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.186305][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.199243][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.211215][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.222257][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.233629][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.245619][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.271556][ T5848] veth1_macvtap: entered promiscuous mode
[   81.288178][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.306851][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.322041][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.338708][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.350687][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.380099][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.392215][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.403444][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.416363][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.427137][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.437997][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.449664][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.470329][ T5920] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[   81.485937][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.497258][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.515124][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.538591][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.564221][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.576150][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.587616][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.640261][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.650311][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.659806][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.669471][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.688801][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.699056][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.707985][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.717686][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.731022][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.742227][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.752483][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.763256][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.774696][ T5838] Bluetooth: hci1: command tx timeout
[   81.780298][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.790918][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.801039][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.811569][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.822863][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.836136][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.847368][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.858338][ T5838] Bluetooth: hci2: command tx timeout
[   81.863797][ T5838] Bluetooth: hci0: command tx timeout
[   81.869543][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.880514][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.890500][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.901235][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.914104][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.924777][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.935174][ T5838] Bluetooth: hci3: command tx timeout
[   81.940612][ T5838] Bluetooth: hci4: command tx timeout
[   81.948012][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.981023][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.990270][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.999773][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.013432][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.085127][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.092993][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.206623][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.216484][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.249683][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.258844][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.290683][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.299793][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.362308][  T458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.393458][  T458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.420258][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.435065][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.467707][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.496462][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.649862][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.672443][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.008967][ T5940] veth2: entered promiscuous mode
[   83.072496][ T5940] veth2: entered allmulticast mode
[   83.507891][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'.
[   83.595210][ T5928] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   83.786486][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   83.822812][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   83.854037][ T5838] Bluetooth: hci1: command tx timeout
[   83.936747][ T5838] Bluetooth: hci0: command tx timeout
[   83.942827][ T5147] Bluetooth: hci2: command tx timeout
[   84.014940][ T5147] Bluetooth: hci3: command tx timeout
[   84.020499][ T5838] Bluetooth: hci4: command tx timeout
[   84.048474][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.057284][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.180407][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'.
[   84.338519][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'.
[   84.519050][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.567695][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.929646][ T5956] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.965889][ T5956] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.985909][ T5956] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.999393][ T5956] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.187614][ T5956] veth2: left promiscuous mode
[   85.205864][ T5956] veth2: left allmulticast mode
[   85.296670][ T5973] ieee802154 phy0 wpan0: encryption failed: -22
[   85.344990][ T5956] syz.1.10 (5956) used greatest stack depth: 19632 bytes left
[   85.345705][ T5976] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   85.538947][ T5981] tipc: Can't bind to reserved service type 1
[   85.671111][ T5982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14'.
[   85.771164][ T5976] veth3: entered promiscuous mode
[   85.873752][ T5984] netlink: 'syz.1.17': attribute type 6 has an invalid length.
[   86.238089][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   86.298754][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   86.435347][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.662543][ T6000] netlink: 108 bytes leftover after parsing attributes in process `syz.3.23'.
[   86.678829][ T6000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.808140][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.829323][ T6016] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET)
[   86.892787][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'.
[   86.924721][ T6019] 8021q: VLANs not supported on ip_vti0
[   87.051365][ T6025] bridge_slave_1: left allmulticast mode
[   87.059112][ T6025] bridge_slave_1: left promiscuous mode
[   87.067358][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.079579][ T6025] bridge_slave_0: left allmulticast mode
[   87.087968][ T6025] bridge_slave_0: left promiscuous mode
[   87.095526][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.480925][ T6038] 8021q: VLANs not supported on ipvlan0
[   87.504504][ T6038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.512128][ T6038] IPv6: NLM_F_CREATE should be set when creating new route
[   88.106789][ T6057] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.787407][ T6071] Zero length message leads to an empty skb
[   88.883139][ T6076] netlink: 'syz.0.45': attribute type 29 has an invalid length.
[   89.043866][ T6074] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3952. macoff=96
[   89.166390][ T6086] __nla_validate_parse: 4 callbacks suppressed
[   89.166412][ T6086] netlink: 84 bytes leftover after parsing attributes in process `syz.3.47'.
[   90.330906][ T6122] xt_connbytes: Forcing CT accounting to be enabled
[   90.343177][ T6122] Cannot find add_set index 2 as target
[   90.387108][ T6122] netlink: 'syz.4.57': attribute type 1 has an invalid length.
[   90.457807][ T6122] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[   90.684975][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'.
[   90.731259][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'.
[   90.762762][ T6131] netlink: 'syz.1.61': attribute type 10 has an invalid length.
[   90.789346][ T6131] netlink: 55 bytes leftover after parsing attributes in process `syz.1.61'.
[   90.808695][ T6133] openvswitch: netlink: Key type 252 is out of range max 32
[   90.890773][ T6131] team0: Port device virt_wifi0 added
[   91.629027][ T6162] hsr0: entered promiscuous mode
[   91.661144][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   91.773963][ T5147] Bluetooth: hci3: command 0x0405 tx timeout
[   91.794732][ T6162] hsr_slave_0: left promiscuous mode
[   91.804880][ T6129] syz.3.59 (6129) used greatest stack depth: 18832 bytes left
[   91.820863][ T6162] hsr_slave_1: left promiscuous mode
[   91.849379][ T6165] netlink: set zone limit has 8 unknown bytes
[   91.873384][ T6162] hsr0 (unregistering): left promiscuous mode
[   91.925121][ T6165] lo: entered promiscuous mode
[   92.253734][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'.
[   92.270149][  T975] cfg80211: failed to load regulatory.db
[   92.289045][ T6175] netlink: 'syz.1.73': attribute type 2 has an invalid length.
[   92.375489][ T6175] team0: Port device virt_wifi0 removed
[   92.413328][ T6180] netlink: 'syz.4.74': attribute type 1 has an invalid length.
[   92.425802][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.503052][ T6181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.74'.
[   92.678291][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'.
[   92.758326][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'.
[   92.905489][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'.
[   93.428772][   T25] IPVS: starting estimator thread 0...
[   93.435031][ T6205] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   93.554041][ T6213] IPVS: using max 19 ests per chain, 45600 per kthread
[   93.616147][ T6219] Illegal XDP return value 3383060103 on prog  (id 26) dev N/A, expect packet loss!
[   94.699258][ T6257] __nla_validate_parse: 1 callbacks suppressed
[   94.699279][ T6257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.93'.
[   95.214641][ T6267] netlink: 'syz.4.97': attribute type 4 has an invalid length.
[   95.267928][ T6267] netlink: 'syz.4.97': attribute type 5 has an invalid length.
[   95.284006][ T6267] netlink: 56 bytes leftover after parsing attributes in process `syz.4.97'.
[   95.462426][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'.
[   95.728385][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.736740][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.103051][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.170017][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.252937][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   96.427164][ T6282] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.446283][ T6282] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.459808][ T6282] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.470000][ T6282] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.618818][ T6305] tipc: Started in network mode
[   96.655634][ T6305] tipc: Node identity e649e6123701, cluster identity 4711
[   96.663096][ T6305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.771896][ T6330] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   96.804217][ T6330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.987312][ T6306] tipc: Resetting bearer <eth:syzkaller0>
[   97.013579][ T6301] tipc: Resetting bearer <eth:syzkaller0>
[   97.726866][  T978] tipc: Node number set to 3511215634
[   98.559858][ T6301] tipc: Disabling bearer <eth:syzkaller0>
[   99.061955][ T6365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.118'.
[   99.092970][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'.
[   99.124534][ T6368] lo: left promiscuous mode
[   99.368252][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.376063][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.406592][ T6377] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002
[   99.553622][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.579862][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.730691][ T6368] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.740060][ T6368] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.749893][ T6368] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.760048][ T6368] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.313740][ T6399] netlink: 'syz.0.126': attribute type 3 has an invalid length.
[  100.395959][ T6402] netlink: 'syz.3.129': attribute type 39 has an invalid length.
[  100.819724][ T6414] netlink: set zone limit has 4 unknown bytes
[  101.262194][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'.
[  101.383470][ T6437] openvswitch: netlink: EtherType 0 is less than min 600
[  101.513561][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'.
[  101.529417][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[  101.539821][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'.
[  102.223613][ T6459] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695)
[  102.254050][ T6459] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  102.690627][ T6480] IPv6: sit1: Disabled Multicast RS
[  104.416449][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'.
[  105.505111][ T6567] xt_hashlimit: max too large, truncated to 1048576
[  105.542479][ T6567] Cannot find set identified by id 0 to match
[  106.467995][ T6600] SET target dimension over the limit!
[  106.594323][ T6609] syzkaller0: tun_chr_ioctl cmd 2147767507
[  107.047278][ T6620] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.086493][ T6634] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  107.093514][ T6620] bond0: (slave bond1): Enslaving as an active interface with an up link
[  107.172797][ T5836] IPVS: starting estimator thread 0...
[  107.250008][ T6635] netlink: 830 bytes leftover after parsing attributes in process `syz.4.190'.
[  107.294218][ T6639] IPVS: using max 19 ests per chain, 45600 per kthread
[  107.409457][ T6652] bridge_slave_0: left allmulticast mode
[  107.422410][ T6652] bridge_slave_0: left promiscuous mode
[  107.461625][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.489094][ T6653] netlink: 596 bytes leftover after parsing attributes in process `syz.2.198'.
[  107.540253][ T6652] bridge_slave_1: left allmulticast mode
[  107.546716][ T6652] bridge_slave_1: left promiscuous mode
[  107.552568][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.565019][ T6652] bond0: (slave bond_slave_0): Releasing backup interface
[  107.578602][ T6652] bond0: (slave bond_slave_1): Releasing backup interface
[  107.592528][ T6652] team0: Port device team_slave_0 removed
[  107.605011][ T6652] team0: Port device team_slave_1 removed
[  107.612045][ T6652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.621836][ T6652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.324595][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'.
[  108.820533][ T6711] netlink: 'syz.0.213': attribute type 26 has an invalid length.
[  109.343373][ T6737] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  109.436547][ T6742] netlink: 152 bytes leftover after parsing attributes in process `syz.3.219'.
[  109.473155][ T6743] macsec0: entered promiscuous mode
[  109.585705][ T6742] pimreg: entered allmulticast mode
[  109.591719][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.222'.
[  109.618546][ T6737] macsec0: left promiscuous mode
[  109.641237][ T6754] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  109.939742][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'.
[  110.260763][ T6778] ipvlan0: entered promiscuous mode
[  110.315995][ T6778] ipvlan0: left promiscuous mode
[  111.003290][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[  111.041311][ T6817] netlink: 'syz.1.236': attribute type 1 has an invalid length.
[  111.077423][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'.
[  112.216520][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.251755][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.380499][ T6843] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.403581][ T6843] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.423974][ T6843] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.433006][ T6843] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.494265][ T5147] Bluetooth: hci3: command 0x0405 tx timeout
[  112.711323][ T6875] netlink: 'syz.3.246': attribute type 30 has an invalid length.
[  112.786545][ T6875] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  112.822513][ T6875] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  113.391887][ T6902] Bluetooth: MGMT ver 1.23
[  113.534508][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'.
[  113.556176][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[  113.621194][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'.
[  113.649177][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[  113.924984][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'.
[  114.046826][ T6923] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  114.133415][ T6882] netlink: 'syz.3.250': attribute type 39 has an invalid length.
[  114.234642][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[  114.257545][ T6928] netlink: 'syz.1.259': attribute type 1 has an invalid length.
[  114.267528][ T6928] netlink: 'syz.1.259': attribute type 2 has an invalid length.
[  114.284033][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[  115.146697][ T6945] netdevsim netdevsim3: Direct firmware load for /
[  115.146697][ T6945]  failed with error -2
[  115.158840][ T6945] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  115.158840][ T6945] 
[  115.204728][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[  115.235707][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[  115.575204][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'.
[  117.268660][ T7018] pimreg: entered allmulticast mode
[  117.306006][ T7023] pimreg: left allmulticast mode
[  117.431524][ T7026] vlan0: entered promiscuous mode
[  117.671240][ T7036] netlink: 'syz.2.286': attribute type 1 has an invalid length.
[  118.508454][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.516046][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.725044][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.742050][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.832138][ T7054] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.841665][ T7054] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.864112][ T7054] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.876614][ T7054] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.295721][ T7073] __nla_validate_parse: 11 callbacks suppressed
[  119.295746][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'.
[  119.453974][ T7081] IPv6: sit1: Disabled Multicast RS
[  119.461880][ T7081] sit1: entered allmulticast mode
[  119.620815][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'.
[  119.929119][ T7094] sch_fq: defrate 0 ignored.
[  120.891020][ T7122] vlan0: left promiscuous mode
[  121.054679][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'.
[  121.100384][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.311'.
[  121.325938][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'.
[  121.335436][ T7135] netlink: 'syz.4.313': attribute type 3 has an invalid length.
[  121.353085][ T7135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.362293][ T7135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.371109][ T7135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.380235][ T7135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.393934][ T7136] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.313'.
[  121.403135][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.673385][ T7142] bridge0: port 3(vlan2) entered blocking state
[  121.700444][ T7142] bridge0: port 3(vlan2) entered disabled state
[  121.721961][ T7142] vlan2: entered allmulticast mode
[  121.745033][ T7142] vlan2: entered promiscuous mode
[  122.259709][ T7160] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  122.603439][ T7179] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.324'.
[  122.624544][ T7179] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  122.646378][ T7179] nlmon0: Master is either lo or non-ether device
[  122.668779][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'.
[  123.080426][  T978] hid (null): unknown global tag 0xe
[  123.107412][  T978] hid (null): unknown global tag 0xc
[  123.117377][ T7191] Cannot find add_set index 0 as target
[  123.155364][  T978] hid (null): unknown global tag 0xd
[  123.193699][  T978] hid (null): unknown global tag 0xd
[  123.220453][  T978] hid (null): report_id 46516 is invalid
[  123.226365][ T7204] netlink: 'syz.1.329': attribute type 1 has an invalid length.
[  123.252993][ T7192] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  123.266185][  T978] hid (null): global environment stack underflow
[  123.276151][  T978] hid (null): unknown global tag 0xe
[  123.281824][  T978] hid (null): unknown global tag 0xc
[  123.288326][  T978] hid (null): report_id 20188 is invalid
[  123.294840][  T978] hid (null): global environment stack underflow
[  123.320438][ T7204] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.350880][  T978] hid-generic 0005:046D:0A0E.0001: unknown global tag 0xe
[  123.390336][  T978] hid-generic 0005:046D:0A0E.0001: item 0 2 1 14 parsing failed
[  123.424559][  T978] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22
[  123.921540][ T7234] raw_sendmsg: syz.1.336 forgot to set AF_INET. Fix it!
[  124.214586][ T7249] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  124.439975][ T7256] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.449582][ T7256] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.458693][ T7256] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.468044][ T7256] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.479664][ T7258] FAULT_INJECTION: forcing a failure.
[  124.479664][ T7258] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  124.539315][ T7258] CPU: 1 UID: 0 PID: 7258 Comm: syz.4.341 Not tainted 6.14.0-rc5-syzkaller-01215-g89d75c4c67ac #0
[  124.539345][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  124.539362][ T7258] Call Trace:
[  124.539369][ T7258]  <TASK>
[  124.539379][ T7258]  dump_stack_lvl+0x241/0x360
[  124.539417][ T7258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.539441][ T7258]  ? __pfx__printk+0x10/0x10
[  124.539465][ T7258]  ? __pfx_lock_release+0x10/0x10
[  124.539505][ T7258]  should_fail_ex+0x40a/0x550
[  124.539541][ T7258]  _copy_from_user+0x2d/0xb0
[  124.539570][ T7258]  copy_msghdr_from_user+0xae/0x680
[  124.539599][ T7258]  ? __lock_acquire+0x1397/0x2100
[  124.539634][ T7258]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  124.539668][ T7258]  ? __fget_files+0x2a/0x410
[  124.539702][ T7258]  ? __fget_files+0x2a/0x410
[  124.539741][ T7258]  do_recvmmsg+0x3bd/0xab0
[  124.539776][ T7258]  ? __pfx_do_recvmmsg+0x10/0x10
[  124.539821][ T7258]  ? ksys_write+0x22a/0x2b0
[  124.539843][ T7258]  ? __pfx_lock_release+0x10/0x10
[  124.539881][ T7258]  ? sb_end_write+0xe9/0x1c0
[  124.539911][ T7258]  ? vfs_write+0x7fa/0xd10
[  124.539935][ T7258]  ? __mutex_unlock_slowpath+0x227/0x800
[  124.539971][ T7258]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  124.539995][ T7258]  ? __fget_files+0x2a/0x410
[  124.540040][ T7258]  __x64_sys_recvmmsg+0x199/0x250
[  124.540067][ T7258]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  124.540093][ T7258]  ? do_syscall_64+0x100/0x230
[  124.540122][ T7258]  ? do_syscall_64+0xb6/0x230
[  124.540150][ T7258]  do_syscall_64+0xf3/0x230
[  124.540176][ T7258]  ? clear_bhb_loop+0x35/0x90
[  124.540209][ T7258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.540241][ T7258] RIP: 0033:0x7f07dd58d169
[  124.540263][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.540280][ T7258] RSP: 002b:00007f07de3da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  124.540303][ T7258] RAX: ffffffffffffffda RBX: 00007f07dd7a6160 RCX: 00007f07dd58d169
[  124.540319][ T7258] RDX: 0000000000000001 RSI: 0000400000000180 RDI: 0000000000000005
[  124.540331][ T7258] RBP: 00007f07de3da090 R08: 0000000000000000 R09: 0000000000000000
[  124.540344][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.540356][ T7258] R13: 0000000000000000 R14: 00007f07dd7a6160 R15: 00007fff584c4058
[  124.540386][ T7258]  </TASK>
[  124.831675][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'.
[  125.507030][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'.
[  125.540111][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  125.565671][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  125.794324][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  125.873984][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  125.914122][ T7308] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  125.933658][ T7308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.040989][ T7315] Unknown options in mask 1f4
[  126.252291][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  126.295507][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  126.542661][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.359'.
[  126.648698][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[  127.118113][ T7359] netlink: 'syz.4.366': attribute type 58 has an invalid length.
[  127.134546][ T7358] netlink: 'syz.0.367': attribute type 10 has an invalid length.
[  127.142685][ T7358] veth1_vlan: left promiscuous mode
[  127.172687][ T7358] team0: Device veth1_vlan failed to register rx_handler
[  127.207040][ T7364] netlink: 'syz.4.366': attribute type 32 has an invalid length.
[  127.746986][ T7391] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  127.998376][ T7399] can: request_module (can-proto-5) failed.
[  128.582591][ T7428] IPVS: Error connecting to the multicast addr
[  129.263473][ T7455] ÿÿÿÿÿÿ: renamed from vlan1
[  129.476202][ T7465] netlink: 'syz.4.388': attribute type 10 has an invalid length.
[  129.578835][ T7465] veth0_vlan: left promiscuous mode
[  129.589632][ T7465] veth0_vlan: entered promiscuous mode
[  129.633993][ T7465] veth0_vlan: entered allmulticast mode
[  129.684814][ T7465] bridge0: port 3(veth0_vlan) entered blocking state
[  129.720415][ T7465] bridge0: port 3(veth0_vlan) entered disabled state
[  129.763952][ T7465] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  130.194218][ T5209] udevd[5209]: worker [5837] terminated by signal 33 (Unknown signal 33)
[  131.071348][ T7531] __nla_validate_parse: 13 callbacks suppressed
[  131.071371][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'.
[  131.130038][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'.
[  131.475727][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'.
[  131.528418][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[  131.966419][ T7576] bridge0: port 1(gretap0) entered blocking state
[  131.974402][ T7576] bridge0: port 1(gretap0) entered disabled state
[  131.990257][ T7576] gretap0: entered allmulticast mode
[  132.002399][ T7576] gretap0: entered promiscuous mode
[  132.033398][ T7581] gretap0: left allmulticast mode
[  132.044126][ T7581] gretap0: left promiscuous mode
[  132.050871][ T7581] bridge0: port 1(gretap0) entered disabled state
[  132.116324][  T978] IPVS: starting estimator thread 0...
[  132.199039][ T7588] netlink: 'syz.4.416': attribute type 1 has an invalid length.
[  132.207721][ T7585] IPVS: using max 19 ests per chain, 45600 per kthread
[  132.252010][ T7588] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  132.268651][   T52] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.289803][ T7588] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.359938][ T7588] veth5: entered promiscuous mode
[  132.371834][ T7588] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  132.415320][ T6900] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.526284][ T7601] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  132.718162][ T7617] netlink: 'syz.2.423': attribute type 10 has an invalid length.
[  132.753007][ T7616] syzkaller1: entered promiscuous mode
[  132.759690][ T7616] syzkaller1: entered allmulticast mode
[  132.765775][ T7611] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  132.776056][ T7617] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  132.779451][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'.
[  132.802736][ T7617] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  132.804058][ T7611] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  132.829680][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'.
[  132.832097][ T7617] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  133.012987][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'.
[  133.217459][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  133.224317][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  133.381391][ T7649] netlink: 'syz.1.433': attribute type 5 has an invalid length.
[  134.203910][ T7646] tipc: Started in network mode
[  134.209182][ T7646] tipc: Node identity ac1414aa, cluster identity 4711
[  134.217618][ T7646] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.229549][ T7646] tipc: Enabled bearer <udp:s>, priority 10
[  134.238976][ T7659] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:0
[  134.271292][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'.
[  134.364221][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.503899][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.643981][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.793875][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  134.943988][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.083986][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.224330][ T5836] tipc: Node number set to 2886997162
[  135.363915][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.408325][ T7681] bridge: RTM_NEWNEIGH with invalid ether address
[  135.415218][ T7680] netlink: 'syz.4.442': attribute type 1 has an invalid length.
[  135.425665][ T7680] netlink: 236 bytes leftover after parsing attributes in process `syz.4.442'.
[  135.612648][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.443'.
[  135.633933][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  135.657415][ T7685] netlink: 'syz.0.443': attribute type 3 has an invalid length.
[  136.134228][ T7723] netlink: 'syz.0.448': attribute type 10 has an invalid length.
[  136.164161][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  136.177554][ T7723] 8021q: adding VLAN 0 to HW filter on device team0
[  136.209985][ T7723] bond0: (slave team0): Enslaving as an active interface with an up link
[  136.327750][ T7727] netlink: 'syz.4.450': attribute type 10 has an invalid length.
[  136.376263][ T7727] bond0: (slave team0): Enslaving as an active interface with an up link
[  136.446305][ T7733] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:28e8:daff:fe0a:f182 error=-28
[  136.548959][ T7731] tipc: Started in network mode
[  136.558826][ T7731] tipc: Node identity ac14142f, cluster identity 4711
[  136.570623][ T7731] tipc: New replicast peer: 0.0.0.0
[  136.580836][ T7731] tipc: Enabled bearer <udp:syz2>, priority 10
[  136.921670][ T7733] infiniband syz1: set down
[  136.933384][ T7733] infiniband syz1: added team_slave_0
[  136.962148][ T7750] sctp: [Deprecated]: syz.1.453 (pid 7750) Use of int in max_burst socket option deprecated.
[  136.962148][ T7750] Use struct sctp_assoc_value instead
[  137.012104][ T7733] RDS/IB: syz1: added
[  137.023545][ T7733] smc: adding ib device syz1 with port count 1
[  137.030747][ T7733] smc:    ib device syz1 port 1 has pnetid 
[  137.374466][ T7758] trusted_key: syz.0.458 sent an empty control message without MSG_MORE.
[  137.585381][ T6314] tipc: Node number set to 2886997039
[  137.650206][ T7767] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  137.677474][ T7767] __nla_validate_parse: 1 callbacks suppressed
[  137.677497][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'.
[  137.784507][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'.
[  137.828731][ T7772] xt_nat: multiple ranges no longer supported
[  138.006013][ T7781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  138.352471][ T7801] netlink: 'syz.4.471': attribute type 21 has an invalid length.
[  138.372789][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.471'.
[  138.470019][ T7808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'.
[  138.529649][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.474'.
[  138.883050][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'.
[  138.892292][ T7833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.479'.
[  138.902652][ T7833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  139.068994][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'.
[  139.147420][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.482'.
[  139.170819][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'.
[  139.294003][    C1] net_ratelimit: 2 callbacks suppressed
[  139.294028][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  140.343971][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  140.663897][ T7882] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[  141.121949][ T7894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.374068][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  142.413981][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  142.548132][ T7947] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  143.454839][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.173415][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.189656][ T7988] team0: Port device bond0 added
[  144.345926][ T7998] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  144.355922][ T7998] netlink: 'syz.1.530': attribute type 10 has an invalid length.
[  144.370560][ T7998] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  144.419168][ T8004] tap0: tun_chr_ioctl cmd 1074025677
[  144.426766][ T8004] tap0: linktype set to 804
[  144.500884][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.540893][ T8008] __nla_validate_parse: 9 callbacks suppressed
[  144.540914][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.534'.
[  145.382652][ T8058] xt_l2tp: v2 sid > 0xffff: 262144
[  145.403947][ T8058] netlink: 312 bytes leftover after parsing attributes in process `syz.1.548'.
[  145.421889][ T8058] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  145.469180][ T8064] xt_hashlimit: size too large, truncated to 1048576
[  145.545030][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.557947][ T8066] No such timeout policy "syz0"
[  146.173061][ T8085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'.
[  146.182825][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'.
[  146.574942][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.584730][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[  146.610587][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[  146.850589][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'.
[  147.157603][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.562'.
[  147.533647][ T8130] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  147.557954][ T8130] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  147.613948][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  148.034195][ T8147] netlink: 'syz.3.573': attribute type 1 has an invalid length.
[  148.070943][ T8147] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  148.152789][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'.
[  148.171192][ T8147] veth5: entered promiscuous mode
[  148.172654][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'.
[  148.186451][ T8156] netlink: 'syz.3.573': attribute type 5 has an invalid length.
[  148.206870][ T8156] netlink: 'syz.3.573': attribute type 6 has an invalid length.
[  148.221873][ T8147] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  148.331236][ T8161] netlink: 'syz.1.577': attribute type 1 has an invalid length.
[  148.337274][ T8163] netlink: 'syz.4.578': attribute type 9 has an invalid length.
[  148.653867][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  148.997269][ T8198] netlink: 'syz.0.588': attribute type 10 has an invalid length.
[  149.053142][ T8198] syz_tun: entered promiscuous mode
[  149.087821][ T8198] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  149.659153][ T8223] __nla_validate_parse: 25 callbacks suppressed
[  149.659184][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'.
[  149.693950][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.704028][ T8223] netlink: 'syz.1.593': attribute type 7 has an invalid length.
[  149.734109][ T8223] netlink: 'syz.1.593': attribute type 8 has an invalid length.
[  149.752185][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'.
[  150.116290][ T8248] syzkaller1: tun_chr_ioctl cmd 1074025673
[  150.181447][ T8248] GUP no longer grows the stack in syz.3.598 (8248): 400000006000-40000000a000 (400000005000)
[  150.212228][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.3.598 Not tainted 6.14.0-rc5-syzkaller-01215-g89d75c4c67ac #0
[  150.212262][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  150.212275][ T8248] Call Trace:
[  150.212282][ T8248]  <TASK>
[  150.212291][ T8248]  dump_stack_lvl+0x241/0x360
[  150.212323][ T8248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.212347][ T8248]  ? __pfx__printk+0x10/0x10
[  150.212365][ T8248]  ? find_vma+0xf9/0x170
[  150.212398][ T8248]  __get_user_pages+0x3b07/0x4140
[  150.212431][ T8248]  ? mark_lock+0x9a/0x360
[  150.212478][ T8248]  ? __pfx___get_user_pages+0x10/0x10
[  150.212509][ T8248]  ? __gup_longterm_locked+0xd2f/0x17f0
[  150.212534][ T8248]  ? __pfx_down_read_killable+0x10/0x10
[  150.212568][ T8248]  ? __pfx_lock_acquire+0x10/0x10
[  150.212600][ T8248]  ? try_get_folio+0xf1/0x6f0
[  150.212623][ T8248]  ? __pfx_lock_release+0x10/0x10
[  150.212662][ T8248]  __gup_longterm_locked+0xe64/0x17f0
[  150.212698][ T8248]  ? mark_lock+0x9a/0x360
[  150.212722][ T8248]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  150.212754][ T8248]  ? __pfx___gup_longterm_locked+0x10/0x10
[  150.212777][ T8248]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  150.212822][ T8248]  ? gup_fast_fallback+0x207e/0x29c0
[  150.212848][ T8248]  gup_fast_fallback+0x2266/0x29c0
[  150.212903][ T8248]  ? __pfx_gup_fast_fallback+0x10/0x10
[  150.212960][ T8248]  ? __mutex_trylock_common+0x183/0x2e0
[  150.212985][ T8248]  ? __pfx___might_resched+0x10/0x10
[  150.213011][ T8248]  ? is_valid_gup_args+0x124/0x200
[  150.213036][ T8248]  get_user_pages_fast+0xcc/0x160
[  150.213061][ T8248]  ? __pfx_get_user_pages_fast+0x10/0x10
[  150.213082][ T8248]  ? rcu_is_watching+0x15/0xb0
[  150.213106][ T8248]  ? trace_contention_end+0x3c/0x120
[  150.213130][ T8248]  ? __mutex_lock+0x397/0x1010
[  150.213160][ T8248]  __iov_iter_get_pages_alloc+0x3b4/0x8e0
[  150.213194][ T8248]  ? __se_sys_vmsplice+0x4b7/0x14a0
[  150.213220][ T8248]  ? schedule+0x155/0x320
[  150.213245][ T8248]  iov_iter_get_pages2+0xcf/0x130
[  150.213275][ T8248]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  150.213314][ T8248]  __se_sys_vmsplice+0x739/0x14a0
[  150.213368][ T8248]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  150.213396][ T8248]  ? __pfx_futex_wait+0x10/0x10
[  150.213479][ T8248]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  150.213518][ T8248]  ? do_syscall_64+0x100/0x230
[  150.213548][ T8248]  ? do_syscall_64+0xb6/0x230
[  150.213576][ T8248]  do_syscall_64+0xf3/0x230
[  150.213602][ T8248]  ? clear_bhb_loop+0x35/0x90
[  150.213635][ T8248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.213662][ T8248] RIP: 0033:0x7f8b1778d169
[  150.213681][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.213698][ T8248] RSP: 002b:00007f8b18539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  150.213720][ T8248] RAX: ffffffffffffffda RBX: 00007f8b179a6080 RCX: 00007f8b1778d169
[  150.213735][ T8248] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000006
[  150.213748][ T8248] RBP: 00007f8b1780e2a0 R08: 0000000000000000 R09: 0000000000000000
[  150.213764][ T8248] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  150.213775][ T8248] R13: 0000000000000000 R14: 00007f8b179a6080 R15: 00007ffc5d7b1268
[  150.213803][ T8248]  </TASK>
[  150.708456][ T8250] syzkaller1: tun_chr_ioctl cmd 1074025677
[  150.720936][ T8250] syzkaller1: linktype set to 0
[  150.733943][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.186668][ T8268] team0: Port device bond0 removed
[  151.223510][ T8268] bond0: (slave bond_slave_0): Releasing backup interface
[  151.235696][ T8268] bond0: (slave bond_slave_1): Releasing backup interface
[  151.250475][ T8268] team0: Port device team_slave_0 removed
[  151.258526][ T8268] team0: Port device team_slave_1 removed
[  151.264948][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.272963][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.282461][ T8268] bond3: (slave ip6gretap1): Releasing backup interface
[  151.289991][ T8268] bond3: (slave ip6gretap1): the permanent HWaddr of slave - d6:be:0a:60:e0:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  151.320810][ T8268] bond3: (slave veth5): Releasing backup interface
[  151.335438][ T8271] macsec0: entered promiscuous mode
[  151.380969][ T8272] macsec0: left promiscuous mode
[  151.617466][ T8276] : entered promiscuous mode
[  151.705504][ T8282] lo: entered promiscuous mode
[  151.729224][ T8282] tunl0: entered promiscuous mode
[  151.750352][ T8282] gre0: entered promiscuous mode
[  151.773973][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.785260][ T8282] gretap0: entered promiscuous mode
[  151.799463][ T8282] erspan0: entered promiscuous mode
[  151.811333][ T8282] ip_vti0: entered promiscuous mode
[  151.820968][ T8282] ip6_vti0: entered promiscuous mode
[  151.828582][ T8282] sit0: entered promiscuous mode
[  151.839187][ T8282] ip6tnl0: entered promiscuous mode
[  151.847123][ T8282] ip6gre0: entered promiscuous mode
[  151.885272][ T8282] ip6gretap0: entered promiscuous mode
[  151.892534][ T8282] vcan0: entered promiscuous mode
[  151.904408][ T8282] bond0: entered promiscuous mode
[  151.910349][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.917580][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'.
[  151.923447][ T8282] team0: entered promiscuous mode
[  151.932442][ T8282] 8021q: adding VLAN 0 to HW filter on device team0
[  151.940355][ T8282] dummy0: entered promiscuous mode
[  151.947589][ T8282] nlmon0: entered promiscuous mode
[  151.956113][ T8282] caif0: entered promiscuous mode
[  151.961218][ T8282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.143695][ T8294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.611'.
[  152.165042][ T8294] netlink: 300 bytes leftover after parsing attributes in process `syz.2.611'.
[  152.239545][ T8294] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[  152.256354][ T8294] netlink: 2 bytes leftover after parsing attributes in process `syz.2.611'.
[  152.276179][ T8294] team0: entered promiscuous mode
[  152.291965][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  152.307181][ T8294] bridge0: port 1(team0) entered blocking state
[  152.323974][ T8294] bridge0: port 1(team0) entered disabled state
[  152.352025][ T8294] team0: entered allmulticast mode
[  152.442438][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'.
[  152.468218][ T8300] : entered promiscuous mode
[  152.648969][ T8309] netlink: 124 bytes leftover after parsing attributes in process `syz.3.616'.
[  152.760871][ T8315] veth0: mtu less than device minimum
[  152.783432][ T8322] netlink: 'syz.2.619': attribute type 3 has an invalid length.
[  152.814012][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  152.836390][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'.
[  152.933011][ T8320] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.039059][ T8329] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.046953][ T8329] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  153.059138][ T8329] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  153.086026][ T8336] netlink: 'syz.2.623': attribute type 5 has an invalid length.
[  153.244004][ T8341] netlink: 168 bytes leftover after parsing attributes in process `syz.3.625'.
[  153.569749][ T8356] netlink: 'syz.1.628': attribute type 39 has an invalid length.
[  153.648014][ T8347] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  153.853867][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  154.727963][ T8390] __nla_validate_parse: 1 callbacks suppressed
[  154.727985][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'.
[  154.882524][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'.
[  154.893925][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.409258][ T8414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.451470][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'.
[  155.893510][ T8438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.644'.
[  155.933875][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.082280][ T8443] netlink: 'syz.2.645': attribute type 21 has an invalid length.
[  156.124774][ T8443] netlink: 128 bytes leftover after parsing attributes in process `syz.2.645'.
[  156.144795][ T8445] netlink: 'syz.1.643': attribute type 5 has an invalid length.
[  156.232245][ T8443] netlink: 'syz.2.645': attribute type 5 has an invalid length.
[  156.247618][ T8443] netlink: 'syz.2.645': attribute type 6 has an invalid length.
[  156.255789][ T8443] netlink: 3 bytes leftover after parsing attributes in process `syz.2.645'.
[  156.602212][ T8461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  156.973932][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  157.262033][ T8480] netlink: 'syz.0.655': attribute type 3 has an invalid length.
[  157.305502][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.655'.
[  157.349405][ T8480] netlink: 'syz.0.655': attribute type 10 has an invalid length.
[  157.364023][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.655'.
[  157.392523][ T8480] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.406168][ T8464] netlink: 'syz.4.650': attribute type 13 has an invalid length.
[  157.414554][ T8480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.432211][ T8480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.459838][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'.
[  157.465287][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'.
[  157.482256][ T8480] team0: Port device geneve0 added
[  157.538917][ T8482] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.644805][ T8482] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.701422][ T8482] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.946706][ T8482] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.002262][ T8482] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.023988][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  158.061579][ T8482] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.157689][ T8482] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.182341][ T8506] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  158.351796][ T8511] bond3: entered promiscuous mode
[  158.363154][ T8511] bond3: entered allmulticast mode
[  158.381811][ T8511] 8021q: adding VLAN 0 to HW filter on device bond3
[  158.577941][ T8517] syzkaller1: entered promiscuous mode
[  158.607984][ T8517] syzkaller1: entered allmulticast mode
[  158.624013][ T8519] netlink: 'syz.3.665': attribute type 10 has an invalid length.
[  158.645260][ T8519] team0: Device veth1_macvtap failed to register rx_handler
[  159.054129][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.222461][ T8539] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  159.306558][ T8542] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  159.360168][ T8542] netlink: 'syz.3.674': attribute type 19 has an invalid length.
[  159.411438][ T8551] netlink: 'syz.4.675': attribute type 10 has an invalid length.
[  159.554446][ T8551] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  159.574281][ T8551] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  159.614848][ T8551] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  160.093947][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.186468][ T8578] __nla_validate_parse: 8 callbacks suppressed
[  160.186489][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.681'.
[  161.028954][ T8568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.680'.
[  161.133896][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  161.490658][ T8625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'.
[  161.845001][ T8642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  162.183909][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  162.385102][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'.
[  162.424894][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'.
[  163.047729][ T8675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.055237][ T8675] IPv6: NLM_F_CREATE should be set when creating new route
[  163.063126][ T8675] IPv6: NLM_F_CREATE should be set when creating new route
[  163.184332][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  163.213926][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  163.442038][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'.
[  163.736699][ T8690] lo: entered allmulticast mode
[  163.963700][ T8695] validate_nla: 1 callbacks suppressed
[  163.963721][ T8695] netlink: 'syz.0.717': attribute type 3 has an invalid length.
[  164.071406][ T8705] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[  164.253894][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.326752][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'.
[  164.372135][ T8715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.721'.
[  164.806577][ T8728] netlink: 56 bytes leftover after parsing attributes in process `syz.4.723'.
[  165.293887][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.297382][ T8749] x_tables: ip_tables: udp match: only valid for protocol 17
[  165.554932][ T8757] tipc: Started in network mode
[  165.555060][ T8749] netlink: 'syz.3.730': attribute type 2 has an invalid length.
[  165.559945][ T8757] tipc: Node identity ac14140f, cluster identity 4711
[  165.605130][ T8757] tipc: Enabled bearer <udp:syz0>, priority 10
[  165.719991][ T8749] : entered promiscuous mode
[  165.935887][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'.
[  165.939916][ T8764] Bluetooth: MGMT ver 1.23
[  166.005802][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'.
[  166.066388][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'.
[  166.127294][ T8775] lo: left allmulticast mode
[  166.204751][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'.
[  166.333976][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.549581][ T8795] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.633582][ T8797] netlink: 'syz.0.743': attribute type 9 has an invalid length.
[  166.724098][ T5891] tipc: Node number set to 2886997007
[  166.833522][ T8795] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.870631][ T8804] ip6tnl0: left promiscuous mode
[  166.883498][ T8804] netlink: 148 bytes leftover after parsing attributes in process `syz.3.746'.
[  166.909614][ T8804] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  166.967697][ T8795] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.075742][ T8795] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.273203][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'.
[  167.306310][ T8812] bridge_slave_1: left allmulticast mode
[  167.312683][ T8812] bridge_slave_1: left promiscuous mode
[  167.318746][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.331138][ T8812] bridge_slave_0: left allmulticast mode
[  167.338017][ T8812] bridge_slave_0: left promiscuous mode
[  167.351187][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.383955][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.415520][ T8812] bond0: (slave bridge0): Releasing backup interface
[  167.520774][ T8795] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.574851][ T8795] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.610369][ T8795] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.638730][ T8795] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.708620][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'.
[  167.809974][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  167.995736][ T8839] netlink: 84 bytes leftover after parsing attributes in process `syz.0.755'.
[  168.024811][ T8839] netem: invalid attributes len -16
[  168.030369][ T8839] netem: change failed
[  168.305205][ T8849] netlink: 176 bytes leftover after parsing attributes in process `syz.0.761'.
[  168.340160][ T8850] openvswitch: netlink: IPv4 tun info is not correct
[  168.359827][ T8850] openvswitch: netlink: IPv4 tun info is not correct
[  168.369328][ T8850] openvswitch: netlink: IPv4 tun info is not correct
[  168.380340][ T8850] openvswitch: netlink: IPv4 tun info is not correct
[  168.413953][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  168.431805][ T8850] openvswitch: netlink: IPv4 tun info is not correct
[  168.852302][ T8849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.894535][ T8869] pim6reg1: entered promiscuous mode
[  168.900112][ T8869] pim6reg1: entered allmulticast mode
[  168.971127][ T8870] sctp: [Deprecated]: syz.4.767 (pid 8870) Use of int in max_burst socket option.
[  168.971127][ T8870] Use struct sctp_assoc_value instead
[  169.034069][ T8874] sctp: [Deprecated]: syz.4.767 (pid 8874) Use of int in max_burst socket option.
[  169.034069][ T8874] Use struct sctp_assoc_value instead
[  169.904139][ T7704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.926305][ T7704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.948406][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.979364][ T8902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.020460][ T8897] Cannot find del_set index 1 as target
[  170.064551][ T8906] netlink: 'syz.0.779': attribute type 5 has an invalid length.
[  170.098509][ T8906] ip6erspan0: entered promiscuous mode
[  170.719386][ T8935] netlink: 'syz.4.788': attribute type 4 has an invalid length.
[  170.785909][ T8938] netlink: 'syz.4.788': attribute type 4 has an invalid length.
[  170.891577][ T8942] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[  170.923147][ T8942] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[  171.030608][ T8949] team0: left promiscuous mode
[  171.043532][ T8948] __nla_validate_parse: 8 callbacks suppressed
[  171.043550][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'.
[  171.243548][ T8956] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  171.294229][ T5838] Bluetooth: hci3: command 0x0405 tx timeout
[  171.616122][ T8962] syzkaller1: entered promiscuous mode
[  171.621754][ T8962] syzkaller1: entered allmulticast mode
[  171.844672][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[  171.971946][ T8979] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[  172.084457][ T8979] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.133078][ T8981] geneve2: entered promiscuous mode
[  172.139342][ T8981] geneve2: entered allmulticast mode
[  172.155971][ T8981] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.165267][ T8981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.174322][ T8981] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.182911][ T8981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.196347][ T8981] bond2: (slave geneve2): making interface the new active one
[  172.207018][ T8981] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  172.263688][ T8984] netlink: 'syz.4.803': attribute type 4 has an invalid length.
[  172.853339][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.801'.
[  172.910994][    T9] IPVS: starting estimator thread 0...
[  173.024275][ T8999] IPVS: using max 21 ests per chain, 50400 per kthread
[  173.159879][ T9004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.809'.
[  173.222627][ T9004] netlink: 100 bytes leftover after parsing attributes in process `syz.0.809'.
[  173.343733][ T9012] netlink: 'syz.4.811': attribute type 5 has an invalid length.
[  173.417933][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'.
[  173.579757][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'.
[  173.692167][ T9022] net_ratelimit: 23 callbacks suppressed
[  173.692187][ T9022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.840563][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'.
[  173.913148][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'.
[  174.008419][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'.
[  174.026686][ T9034] netlink: 'syz.2.817': attribute type 4 has an invalid length.
[  174.056698][ T9033] macvlan2: entered promiscuous mode
[  174.063455][ T9033] bond0: entered promiscuous mode
[  174.077474][ T9033] bond_slave_0: entered promiscuous mode
[  174.083489][ T9033] bond_slave_1: entered promiscuous mode
[  174.096778][ T9033] team0: entered promiscuous mode
[  174.102008][ T9033] team_slave_0: entered promiscuous mode
[  174.112076][ T9033] team_slave_1: entered promiscuous mode
[  174.136142][ T9033] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  174.336059][ T9043] netlink: set zone limit has 4 unknown bytes
[  174.556963][ T9060] netlink: 'syz.3.827': attribute type 1 has an invalid length.
[  174.607904][ T9060] 8021q: adding VLAN 0 to HW filter on device bond5
[  174.630802][ T9060] sock: sock_set_timeout: `syz.3.827' (pid 9060) tries to set negative timeout
[  175.231641][ T9097] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  175.317497][ T9098] bond2: entered promiscuous mode
[  175.340822][ T9098] bond2: entered allmulticast mode
[  175.353195][ T9098] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.635469][ T9116] netlink: 'syz.3.844': attribute type 1 has an invalid length.
[  175.774510][ T9116] 8021q: adding VLAN 0 to HW filter on device bond6
[  175.790202][ T9117] geneve2: entered promiscuous mode
[  175.812755][ T9117] geneve2: entered allmulticast mode
[  175.836279][ T9117] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.853026][ T9117] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.861752][ T9117] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.889273][ T9117] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.919657][ T9117] bond6: (slave geneve2): making interface the new active one
[  175.929936][ T9117] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  175.948387][ T9119] syzkaller1: entered promiscuous mode
[  175.955323][ T9119] syzkaller1: entered allmulticast mode
[  176.059244][ T9134] netlink: 'syz.2.848': attribute type 16 has an invalid length.
[  176.068350][ T9134] __nla_validate_parse: 9 callbacks suppressed
[  176.068370][ T9134] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.848'.
[  176.257258][ T9136] netlink: 14 bytes leftover after parsing attributes in process `syz.3.849'.
[  176.420352][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.853'.
[  176.472758][ T9155] netlink: 'syz.4.853': attribute type 7 has an invalid length.
[  176.712567][ T9166] syzkaller1: entered promiscuous mode
[  176.734133][ T9166] syzkaller1: entered allmulticast mode
[  177.420382][ T9195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.865'.
[  177.436144][ T9195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.865'.
[  177.451025][ T9195] netlink: 'syz.0.865': attribute type 2 has an invalid length.
[  177.487828][ T9195] netlink: 'syz.0.865': attribute type 9 has an invalid length.
[  177.515038][ T9195] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.865'.
[  177.556974][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  178.258915][ T9223] SET target dimension over the limit!
[  178.483528][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'.
[  178.500307][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'.
[  178.515356][ T9235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  178.774290][ T9248] netlink: 'syz.2.880': attribute type 21 has an invalid length.
[  178.782158][ T9248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.880'.
[  179.504183][ T9284] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  180.291487][ T9304] xt_CT: No such helper "snmp"
[  180.728082][ T9324] netlink: 'syz.0.897': attribute type 3 has an invalid length.
[  180.988057][ T9332] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  181.340574][ T9341] netlink: 'syz.0.903': attribute type 2 has an invalid length.
[  181.522327][ T9347] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[  181.634420][ T9347] 8021q: adding VLAN 0 to HW filter on device bond4
[  181.666769][ T9347] bond3: (slave bond4): making interface the new active one
[  181.694917][ T9347] bond3: (slave bond4): Enslaving as an active interface with an up link
[  181.704040][ T9349] batadv_slave_1: entered promiscuous mode
[  181.718190][ T9353] batadv_slave_0: entered promiscuous mode
[  181.900620][ T9364] __nla_validate_parse: 3 callbacks suppressed
[  181.900643][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  181.931389][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'.
[  182.141745][ T9344] batadv_slave_0: left promiscuous mode
[  182.148494][ T9344] batadv_slave_1: left promiscuous mode
[  183.136102][ T9424] netlink: 'syz.1.928': attribute type 1 has an invalid length.
[  183.149203][ T9424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.928'.
[  183.168927][ T9432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'.
[  183.567134][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'.
[  184.043202][ T9457] netlink: 76 bytes leftover after parsing attributes in process `syz.3.938'.
[  184.132858][ T9460] netlink: 'syz.4.939': attribute type 5 has an invalid length.
[  184.414995][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  184.423179][ T9477] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (12)
[  184.454925][ T9479] netlink: 148 bytes leftover after parsing attributes in process `syz.2.944'.
[  184.464664][ T9479] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  184.499651][ T9483] netlink: 71 bytes leftover after parsing attributes in process `syz.4.942'.
[  184.566520][ T9445] netlink: 'syz.1.933': attribute type 11 has an invalid length.
[  184.574995][ T9445] netlink: 'syz.1.933': attribute type 5 has an invalid length.
[  184.970439][ T9495] netlink: 'syz.0.948': attribute type 39 has an invalid length.
[  185.329972][ T9498] tun0: tun_chr_ioctl cmd 1074025675
[  185.335886][ T9498] tun0: persist enabled
[  185.347920][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'.
[  185.383618][ T9498] tun0: tun_chr_ioctl cmd 26130
[  185.410829][ T9500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.950'.
[  185.937592][ T9523] pimreg3: entered allmulticast mode
[  186.011197][ T9528] openvswitch: netlink: Message has 8 unknown bytes.
[  186.684217][ T9564] x_tables: ip_tables: udp match: only valid for protocol 17
[  187.261430][ T9587] __nla_validate_parse: 8 callbacks suppressed
[  187.261450][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'.
[  187.321025][ T9588] SET target dimension over the limit!
[  187.350888][ T9587] netlink: 'syz.4.972': attribute type 12 has an invalid length.
[  187.424250][ T9587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.972'.
[  187.815033][ T9611] openvswitch: netlink: Missing valid actions attribute.
[  187.822455][ T9611] openvswitch: netlink: Actions may not be safe on all matching packets
[  188.119892][ T9624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.983'.
[  188.285327][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[  189.195280][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'.
[  189.233359][ T9647] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  189.839777][ T9677] netlink: 104 bytes leftover after parsing attributes in process `syz.4.995'.
[  189.950874][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'.
[  190.101445][ T9679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.401572][ T9691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1000'.
[  190.939108][ T9707] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.255520][ T9713] netlink: 'syz.1.1005': attribute type 21 has an invalid length.
[  191.534785][ T9721] Cannot find del_set index 1 as target
[  191.581174][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'.
[  191.995751][ T9730] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1008'.
[  192.356162][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'.
[  192.372228][ T9734] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  192.508407][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'.
[  192.937427][ T9753] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1015'.
[  193.284457][ T9758] nftables ruleset with unbound chain
[  193.341446][ T9761] netlink: 'syz.3.1017': attribute type 1 has an invalid length.
[  193.353861][ T9761] netlink: 'syz.3.1017': attribute type 2 has an invalid length.
[  193.378354][ T9761] netlink: 'syz.3.1017': attribute type 1 has an invalid length.
[  193.423061][ T9759] batadv0: entered promiscuous mode
[  193.524025][ T9757] batadv0: left promiscuous mode
[  193.721337][ T9772] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1021'.
[  193.803361][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'.
[  194.177370][ T9790] netlink: 'syz.4.1026': attribute type 1 has an invalid length.
[  194.199681][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1026'.
[  194.234148][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  194.354694][ T9790] macvlan3: entered promiscuous mode
[  194.364799][ T9788] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1025'.
[  194.374014][ T9790] bridge0: entered promiscuous mode
[  194.415700][ T9790] bridge0: port 3(macvlan3) entered blocking state
[  194.428141][ T9798] xt_hashlimit: size too large, truncated to 1048576
[  194.435887][ T9790] bridge0: port 3(macvlan3) entered disabled state
[  194.451517][ T9790] macvlan3: entered allmulticast mode
[  194.468639][ T9790] bridge0: entered allmulticast mode
[  194.512724][ T9790] macvlan3: left allmulticast mode
[  194.532878][ T9790] bridge0: left allmulticast mode
[  194.568054][ T9790] bridge0: left promiscuous mode
[  194.659846][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.666996][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.723288][ T9788] gretap0: entered promiscuous mode
[  195.324097][ T9832] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1034'.
[  195.353304][ T9833] netlink: 'syz.0.1035': attribute type 11 has an invalid length.
[  195.417994][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'.
[  195.648626][ T9845] ip6t_rpfilter: unknown options
[  195.770093][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.815654][ T9800] 8021q: adding VLAN 0 to HW filter on device team0
[  195.893176][ T9800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.127645][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  196.163652][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  196.213665][   T12] bond0: now running without any active interface!
[  197.590638][ T9894] x_tables: unsorted entry at hook 1
[  198.187251][ T9907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.229303][ T9903] tipc: Resetting bearer <eth:syzkaller0>
[  198.928572][ T9916] __nla_validate_parse: 6 callbacks suppressed
[  198.928593][ T9916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1058'.
[  199.371550][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'.
[  200.276392][ T9903] tipc: Disabling bearer <eth:syzkaller0>
[  200.357870][ T9920] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1059'.
[  200.553084][ T9926] netlink: 'syz.1.1062': attribute type 1 has an invalid length.
[  200.623078][ T9926] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1062'.
[  201.511360][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'.
[  201.651929][ T9947] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  201.694235][ T9947] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  201.867658][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  201.878184][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  201.884371][ T5850] Bluetooth: hci4: command 0x0406 tx timeout
[  201.955652][ T9956] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  202.009645][ T9956] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  202.190220][ T9962] netlink: 'syz.1.1071': attribute type 5 has an invalid length.
[  202.289899][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'.
[  202.299599][ T9964] netlink: 'syz.2.1072': attribute type 2 has an invalid length.
[  202.359358][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'.
[  202.967880][ T9986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1076'.
[  203.046502][ T9990] xt_hashlimit: size too large, truncated to 1048576
[  203.846082][T10004] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  203.882641][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1080'.
[  204.490604][T10035] macsec1: entered allmulticast mode
[  204.496572][T10035] batadv0: entered allmulticast mode
[  204.507570][T10035] batadv0: left allmulticast mode
[  204.558131][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'.
[  204.888559][T10062] FAULT_INJECTION: forcing a failure.
[  204.888559][T10062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.898849][T10060] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  204.915996][T10062] CPU: 0 UID: 0 PID: 10062 Comm: syz.0.1096 Not tainted 6.14.0-rc5-syzkaller-01215-g89d75c4c67ac #0
[  204.916026][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  204.916039][T10062] Call Trace:
[  204.916046][T10062]  <TASK>
[  204.916055][T10062]  dump_stack_lvl+0x241/0x360
[  204.916098][T10062]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.916122][T10062]  ? __pfx__printk+0x10/0x10
[  204.916145][T10062]  ? __pfx_lock_release+0x10/0x10
[  204.916185][T10062]  should_fail_ex+0x40a/0x550
[  204.916221][T10062]  _copy_from_user+0x2d/0xb0
[  204.916249][T10062]  copy_msghdr_from_user+0xae/0x680
[  204.916284][T10062]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  204.916311][T10062]  ? __fget_files+0x2a/0x410
[  204.916344][T10062]  ? __fget_files+0x2a/0x410
[  204.916382][T10062]  __sys_sendmsg+0x209/0x350
[  204.916410][T10062]  ? __pfx___sys_sendmsg+0x10/0x10
[  204.916445][T10062]  ? do_sys_openat2+0x17a/0x1d0
[  204.916501][T10062]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  204.916534][T10062]  ? do_syscall_64+0x100/0x230
[  204.916570][T10062]  ? do_syscall_64+0xb6/0x230
[  204.916599][T10062]  do_syscall_64+0xf3/0x230
[  204.916624][T10062]  ? clear_bhb_loop+0x35/0x90
[  204.916657][T10062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.916685][T10062] RIP: 0033:0x7f10bad8d169
[  204.916707][T10062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.916724][T10062] RSP: 002b:00007f10bbbb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.916753][T10062] RAX: ffffffffffffffda RBX: 00007f10bafa5fa0 RCX: 00007f10bad8d169
[  204.916769][T10062] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003
[  204.916781][T10062] RBP: 00007f10bbbb8090 R08: 0000000000000000 R09: 0000000000000000
[  204.916794][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.916806][T10062] R13: 0000000000000000 R14: 00007f10bafa5fa0 R15: 00007ffd3b4f6268
[  204.916836][T10062]  </TASK>
[  204.943995][T10060] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  205.080451][T10069] netlink: 'syz.0.1098': attribute type 10 has an invalid length.
[  205.087010][T10060] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  205.152180][T10060] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  205.198722][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'.
[  205.211616][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  205.244177][T10072] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  205.325246][T10077] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  205.411544][T10082] openvswitch: netlink: Flow actions attr not present in new flow.
[  205.499517][T10089] netlink: 'syz.0.1104': attribute type 4 has an invalid length.
[  205.544142][T10089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.608338][T10097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1107'.
[  205.770621][T10111] Can't find ip_set type jash:net,port,net
[  205.951403][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1112'.
[  206.067516][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'.
[  206.079257][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1112'.
[  206.445588][T10152] netlink: 'syz.3.1120': attribute type 10 has an invalid length.
[  206.465393][T10152] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  206.473089][T10152] team0: Port device wlan1 added
[  207.339965][T10174] batadv_slave_1: entered promiscuous mode
[  207.429589][T10174] netlink: 'syz.2.1128': attribute type 4 has an invalid length.
[  207.437831][T10182] netlink: 'syz.2.1128': attribute type 4 has an invalid length.
[  207.884495][T10196] 
: renamed from bond0 (while UP)
[  207.909742][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'.
[  207.939658][T10196] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1133'.
[  208.137109][T10172] batadv_slave_1: left promiscuous mode
[  208.224078][T10202] netlink: 'syz.3.1135': attribute type 3 has an invalid length.
[  208.231879][T10202] netlink: 'syz.3.1135': attribute type 1 has an invalid length.
[  208.317498][T10205] xt_TCPMSS: Only works on TCP SYN packets
[  208.350876][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'.
[  211.320809][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'.
[  212.029012][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  212.447514][T10260] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.578088][T10266] vxcan3: entered allmulticast mode
[  212.639531][T10260] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.747863][T10260] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.830073][T10260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.952586][T10260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.967926][T10260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.983247][T10260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.999213][T10260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.090345][T10286] 8021q: adding VLAN 0 to HW filter on device bond3
[  213.133429][T10286] bond0: (slave bond3): Enslaving as an active interface with an up link
[  213.327405][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1167'.
[  213.879279][T10332] pim6reg: entered allmulticast mode
[  213.888956][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'.
[  213.963916][T10335] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  214.280927][T10363] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.313958][T10363] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  214.422691][T10363] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.461654][T10363] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  214.597989][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'.
[  214.616190][T10363] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.641745][T10363] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  214.777564][T10363] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.809709][T10391] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat'
[  214.810046][T10363] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  214.865971][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'.
[  214.971044][T10363] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  214.980310][T10363] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  215.182851][T10363] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  215.205399][T10363] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  215.245168][T10363] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  215.262163][T10363] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  215.337592][T10402] xt_recent: hitcount (486539264) is larger than allowed maximum (65535)
[  215.367303][T10363] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  215.387482][T10363] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  216.061228][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'.
[  216.083050][T10425] netlink: 'syz.4.1205': attribute type 10 has an invalid length.
[  216.109238][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  216.119290][T10425] bridge0: entered promiscuous mode
[  216.137036][T10425] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  216.223438][T10435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1209'.
[  216.467836][T10444] netlink: 'syz.3.1211': attribute type 1 has an invalid length.
[  216.481947][T10445] syzkaller1: entered promiscuous mode
[  216.510056][T10445] syzkaller1: entered allmulticast mode
[  216.915525][T10465] netlink: 'syz.0.1220': attribute type 4 has an invalid length.
[  217.187702][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'.
[  217.364019][T10480] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  217.806595][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'.
[  217.930457][T10514] netlink: 'syz.2.1235': attribute type 1 has an invalid length.
[  218.686896][T10540] FAULT_INJECTION: forcing a failure.
[  218.686896][T10540] name failslab, interval 1, probability 0, space 0, times 0
[  218.751091][T10540] CPU: 0 UID: 0 PID: 10540 Comm: syz.3.1244 Not tainted 6.14.0-rc5-syzkaller-01215-g89d75c4c67ac #0
[  218.751124][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  218.751137][T10540] Call Trace:
[  218.751145][T10540]  <TASK>
[  218.751154][T10540]  dump_stack_lvl+0x241/0x360
[  218.751186][T10540]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.751210][T10540]  ? __pfx__printk+0x10/0x10
[  218.751247][T10540]  should_fail_ex+0x40a/0x550
[  218.751283][T10540]  should_failslab+0xac/0x100
[  218.751312][T10540]  ? skb_clone+0x20c/0x390
[  218.751335][T10540]  kmem_cache_alloc_noprof+0x70/0x380
[  218.751371][T10540]  skb_clone+0x20c/0x390
[  218.751400][T10540]  __netlink_deliver_tap+0x3c4/0x7f0
[  218.751443][T10540]  ? netlink_deliver_tap+0x2e/0x1b0
[  218.751471][T10540]  netlink_deliver_tap+0x19d/0x1b0
[  218.751501][T10540]  netlink_unicast+0x7c4/0x990
[  218.751542][T10540]  ? __pfx_netlink_unicast+0x10/0x10
[  218.751566][T10540]  ? __virt_addr_valid+0x45f/0x530
[  218.751588][T10540]  ? __phys_addr_symbol+0x2f/0x70
[  218.751607][T10540]  ? __check_object_size+0x47a/0x730
[  218.751641][T10540]  netlink_sendmsg+0x8de/0xcb0
[  218.751684][T10540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.751719][T10540]  ? aa_sock_msg_perm+0x91/0x160
[  218.751758][T10540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.751786][T10540]  __sock_sendmsg+0x221/0x270
[  218.751818][T10540]  ____sys_sendmsg+0x53a/0x860
[  218.751850][T10540]  ? __pfx_____sys_sendmsg+0x10/0x10
[  218.751871][T10540]  ? __fget_files+0x2a/0x410
[  218.751905][T10540]  ? __fget_files+0x2a/0x410
[  218.751952][T10540]  __sys_sendmsg+0x269/0x350
[  218.751981][T10540]  ? __pfx___sys_sendmsg+0x10/0x10
[  218.752018][T10540]  ? do_sys_openat2+0x17a/0x1d0
[  218.752077][T10540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.752112][T10540]  ? do_syscall_64+0x100/0x230
[  218.752141][T10540]  ? do_syscall_64+0xb6/0x230
[  218.752170][T10540]  do_syscall_64+0xf3/0x230
[  218.752195][T10540]  ? clear_bhb_loop+0x35/0x90
[  218.752227][T10540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.752255][T10540] RIP: 0033:0x7f8b1778d169
[  218.752274][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.752290][T10540] RSP: 002b:00007f8b1855a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.752313][T10540] RAX: ffffffffffffffda RBX: 00007f8b179a5fa0 RCX: 00007f8b1778d169
[  218.752328][T10540] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003
[  218.752341][T10540] RBP: 00007f8b1855a090 R08: 0000000000000000 R09: 0000000000000000
[  218.752353][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.752365][T10540] R13: 0000000000000000 R14: 00007f8b179a5fa0 R15: 00007ffc5d7b1268
[  218.752397][T10540]  </TASK>
[  218.804102][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'.
[  219.063636][T10539] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  219.120656][T10539] veth5: left promiscuous mode
[  219.132873][T10539] bond3: left promiscuous mode
[  219.142069][T10539] bond3: left allmulticast mode
[  219.162076][T10539] bond0: left promiscuous mode
[  219.175881][T10539] bond_slave_0: left promiscuous mode
[  219.181634][T10539] bond_slave_1: left promiscuous mode
[  219.187463][T10539] team0: left promiscuous mode
[  219.192264][T10539] team_slave_0: left promiscuous mode
[  219.197965][T10539] team_slave_1: left promiscuous mode
[  219.203527][T10539] bridge0: left promiscuous mode
[  219.210589][T10539] macvlan2: left promiscuous mode
[  219.383234][T10559] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1249'.
[  219.398908][T10559] veth0_to_bond: entered promiscuous mode
[  219.405996][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'.
[  219.470381][T10559] veth0_to_bond (unregistering): left promiscuous mode
[  219.501555][T10562] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  219.645643][T10559] bond0: (slave bond_slave_0): Releasing backup interface
[  219.653207][T10546] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  219.901545][T10578] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  219.934217][T10578] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  220.600342][T10602] sit0: entered promiscuous mode
[  220.617446][T10602] netlink: 'syz.4.1262': attribute type 1 has an invalid length.
[  220.630172][T10602] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1262'.
[  220.716641][T10604] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1263'.
[  220.825441][ T5147] Bluetooth: hci4: command 0x0406 tx timeout
[  220.958355][T10613] xt_CT: No such helper "pptp"
[  221.033061][T10617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1268'.
[  221.228220][T10626] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  221.235437][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'.
[  221.498213][T10637] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1274'.
[  221.537962][T10637] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  222.253895][ T5147] Bluetooth: hci3: command 0x0405 tx timeout
[  222.471904][T10677] __nla_validate_parse: 2 callbacks suppressed
[  222.471927][T10677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1288'.
[  222.599507][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'.
[  222.682317][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'.
[  223.250871][T10699] xt_limit: Overflow, try lower: 262144/524288
[  223.516257][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'.
[  223.969556][T10713] xt_CT: You must specify a L4 protocol and not use inversions on it
[  224.294345][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'.
[  224.542951][T10732] netlink: 'syz.0.1304': attribute type 30 has an invalid length.
[  224.603516][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'.
[  224.658217][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'.
[  224.750996][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'.
[  225.525217][T10768] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  225.712841][T10771] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  225.960767][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'.
[  225.971630][T10784] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  226.033450][T10787] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1318'.
[  226.059508][T10787] netlink: 'syz.1.1318': attribute type 12 has an invalid length.
[  226.679896][T10807] ªªªªªª: renamed from lo
[  226.762703][T10807] IPv6: sit1: Disabled Multicast RS
[  226.876339][T10812] netlink: 'syz.2.1324': attribute type 1 has an invalid length.
[  227.802966][T10856] netlink: 'syz.2.1340': attribute type 10 has an invalid length.
[  227.846214][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.856474][T10856] batadv0: entered allmulticast mode
[  227.864182][T10856] team0: Port device batadv0 added
[  227.927908][ T7925] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  227.937698][ T7925] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  228.048551][T10866] __nla_validate_parse: 6 callbacks suppressed
[  228.048912][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'.
[  228.107107][T10870] netlink: 'syz.3.1344': attribute type 9 has an invalid length.
[  228.130723][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'.
[  228.417388][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'.
[  228.466878][T10877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.474338][T10877] IPv6: NLM_F_CREATE should be set when creating new route
[  228.587929][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'.
[  228.812342][T10907] netlink: 'syz.0.1355': attribute type 2 has an invalid length.
[  228.844395][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'.
[  231.124290][T10907] : entered promiscuous mode
[  231.326522][T10926] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1358'.
[  231.499118][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'.
[  231.835480][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1367'.
[  231.846428][T10953] netlink: 'syz.3.1367': attribute type 11 has an invalid length.
[  231.854569][T10953] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1367'.
[  232.017369][T10959] 8021q: VLANs not supported on lo
[  232.077888][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'.
[  232.318019][T10966] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20001
[  233.028017][T10992] delete_channel: no stack
[  233.854628][ T5147] Bluetooth: hci3: command 0x0405 tx timeout
[  234.035931][T11031] netlink: 'syz.2.1384': attribute type 1 has an invalid length.
[  234.054405][T11031] netlink: 'syz.2.1384': attribute type 2 has an invalid length.
[  234.369168][T10995] __nla_validate_parse: 2 callbacks suppressed
[  234.369190][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'.
[  234.401348][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'.
[  235.935772][T11085] batadv_slave_0: entered promiscuous mode
[  236.149555][T11097] SET target dimension over the limit!
[  236.419848][T11106] TCP: TCP_TX_DELAY enabled
[  237.050423][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'.
[  237.072172][T11130] openvswitch: netlink: Flow actions attr not present in new flow.
[  237.117658][T11132] IPv6: sit2: Disabled Multicast RS
[  237.130836][T11132] sit2: entered allmulticast mode
[  237.219011][T11135] netlink: 'syz.2.1416': attribute type 41 has an invalid length.
[  237.253364][T11139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1414'.
[  237.715421][T11151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'.
[  238.093547][T11161] netlink: 'syz.3.1424': attribute type 13 has an invalid length.
[  238.236163][T11161] gretap0: refused to change device tx_queue_len
[  238.262681][T11161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  238.343466][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'.
[  238.652227][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'.
[  238.704687][T11179] netlink: 'syz.4.1427': attribute type 2 has an invalid length.
[  238.713844][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'.
[  238.725099][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'.
[  239.088217][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'.
[  239.799270][T11209] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1436'.
[  239.847248][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'.
[  239.881513][T11209] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  239.883651][T11216] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 1, id = 0
[  240.393692][T11219] bridge0: port 1(ipvlan0) entered blocking state
[  240.414998][T11219] bridge0: port 1(ipvlan0) entered disabled state
[  240.422330][T11219] ipvlan0: entered allmulticast mode
[  240.439288][T11219] bridge0: entered allmulticast mode
[  240.447681][T11219] ipvlan0: left allmulticast mode
[  240.481390][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'.
[  240.494045][T11219] bridge0: left allmulticast mode
[  240.501589][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'.
[  241.121043][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'.
[  241.551808][T11259] set match dimension is over the limit!
[  241.607440][T11260] dvmrp5: entered allmulticast mode
[  241.647493][T11259] pim6reg: entered allmulticast mode
[  241.695800][T11255] netlink: 'syz.0.1444': attribute type 4 has an invalid length.
[  241.742861][T11260] veth7: entered promiscuous mode
[  241.774298][T11266] dvmrp5: left allmulticast mode
[  241.925640][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  241.942109][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  242.140435][T11292] bond0: (slave bridge0): Releasing backup interface
[  242.175732][T11292] bond0: (slave team0): Releasing backup interface
[  242.205213][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'.
[  242.250378][T11292] bridge_slave_0: left allmulticast mode
[  242.285419][T11292] bridge_slave_0: left promiscuous mode
[  242.291578][T11292] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.304203][T11292] bridge_slave_1: left promiscuous mode
[  242.311451][T11292] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.329372][T11292] bond0: (slave bond_slave_1): Releasing backup interface
[  242.361105][T11292] team0: Port device team_slave_0 removed
[  242.374063][T11292] team0: Port device team_slave_1 removed
[  242.380367][T11292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.390222][T11292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.399117][T11292] bond1: (slave ip6gretap1): Removing an active aggregator
[  242.408753][T11292] bond1: (slave ip6gretap1): Releasing backup interface
[  242.416693][T11292] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 4e:ef:91:cc:ee:4d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  242.437979][T11292] bond1: (slave veth5): Releasing backup interface
[  242.469497][T11300] team0: Mode changed to "loadbalance"
[  242.476088][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'.
[  242.577868][T11312] netlink: 'syz.2.1459': attribute type 6 has an invalid length.
[  242.671946][T11321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1460'.
[  242.846154][T11331] No such timeout policy "syz0"
[  242.943987][T11336] syzkaller1: entered promiscuous mode
[  242.949544][T11336] syzkaller1: entered allmulticast mode
[  243.526817][T11365] netlink: 'syz.2.1475': attribute type 10 has an invalid length.
[  243.557251][T11367] netlink: 'syz.1.1476': attribute type 2 has an invalid length.
[  243.581185][T11371] xt_hashlimit: size too large, truncated to 1048576
[  244.638732][T11427] vlan3: entered allmulticast mode
[  244.966943][T11438] delete_channel: no stack
[  244.986639][T11448] __nla_validate_parse: 4 callbacks suppressed
[  244.986661][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'.
[  245.060976][T11455] netlink: 'syz.2.1498': attribute type 1 has an invalid length.
[  245.100129][T11455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'.
[  245.109604][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1498'.
[  245.136251][T11455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'.
[  245.183298][T11455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'.
[  245.409726][T11467] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  246.063410][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'.
[  246.244769][T11501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1509'.
[  246.753384][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  247.021956][T11518] sctp: [Deprecated]: syz.2.1516 (pid 11518) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.021956][T11518] Use struct sctp_sack_info instead
[  247.663079][T11553] sctp: [Deprecated]: syz.2.1522 (pid 11553) Use of int in max_burst socket option deprecated.
[  247.663079][T11553] Use struct sctp_assoc_value instead
[  248.113468][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  248.666874][T11587] batman_adv: batadv0: Adding interface: ip6gretap1
[  248.680010][T11590] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  248.688299][T11587] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  248.756975][T11587] batman_adv: batadv0: Interface activated: ip6gretap1
[  249.108723][ T6311] IPVS: starting estimator thread 0...
[  249.129457][T11611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.174340][ T6900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.190510][T11609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.204229][T11610] IPVS: using max 19 ests per chain, 45600 per kthread
[  249.211514][ T6900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.262611][T11616] netlink: 'syz.4.1541': attribute type 8 has an invalid length.
[  249.583907][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'.
[  250.178771][T11658] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  250.239384][T11665] __nla_validate_parse: 5 callbacks suppressed
[  250.239406][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'.
[  250.384848][T11662] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1555'.
[  250.622998][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  250.962427][T11692] netlink: 'syz.4.1566': attribute type 16 has an invalid length.
[  250.975792][T11692] netlink: 'syz.4.1566': attribute type 17 has an invalid length.
[  251.396958][T11712] ipt_ECN: cannot use operation on non-tcp rule
[  251.483517][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1574'.
[  251.783016][T11726] netlink: 'syz.3.1575': attribute type 3 has an invalid length.
[  251.791361][T11726] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1575'.
[  251.808454][T11725] netlink: 'syz.0.1576': attribute type 26 has an invalid length.
[  251.818017][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  251.841213][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'.
[  251.842580][T11728] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  251.874502][T11728] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  252.110962][T11709] pim6reg1: entered promiscuous mode
[  252.137479][T11709] pim6reg1: entered allmulticast mode
[  252.144215][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'.
[  252.161972][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1579'.
[  252.172789][T11736] tc_dump_action: action bad kind
[  252.246401][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'.
[  252.332105][T11744] xt_socket: unknown flags 0x4
[  252.780747][T11763] IPVS: Error connecting to the multicast addr
[  253.096841][T11778] vxcan1: Master is either lo or non-ether device
[  253.158858][T11782] syzkaller0: entered allmulticast mode
[  253.180681][T11782] syzkaller0 (unregistering): left allmulticast mode
[  253.231398][T11783] syzkaller0: entered allmulticast mode
[  253.456525][T11799] syzkaller0: entered allmulticast mode
[  253.648972][T11813] netlink: 'syz.4.1598': attribute type 75 has an invalid length.
[  253.720525][T11815] netlink: 'syz.3.1599': attribute type 4 has an invalid length.
[  253.889350][T11828] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.896713][T11828] team0: Device bond0 failed to register rx_handler
[  253.922613][T11826] SET target dimension over the limit!
[  254.195902][T11842] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  254.223960][T11842] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  254.294057][T11853] netlink: 'syz.4.1611': attribute type 11 has an invalid length.
[  254.493680][T11870] No such timeout policy "syz0"
[  254.603276][T11870] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  254.972778][T11899] --map-set only usable from mangle table
[  255.070116][T11887] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  255.318159][T11909] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  255.362158][T11917] netlink: 'syz.3.1628': attribute type 10 has an invalid length.
[  255.377180][T11909] team0: Port device wlan1 removed
[  255.389252][T11909] bond6: (slave geneve2): Releasing active interface
[  255.400396][T11920] __nla_validate_parse: 6 callbacks suppressed
[  255.400417][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'.
[  255.423142][T11909] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  255.432415][T11909] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  255.441363][T11909] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  255.458807][T11909] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  255.544207][T11924] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1628'.
[  255.564189][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  255.721994][T11917] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  255.740349][T11917] 
: (slave wlan1): Enslaving as an active interface with an up link
[  255.764426][T11920] team0: left allmulticast mode
[  255.769516][T11920] batadv0: left allmulticast mode
[  255.780737][T11920] bridge0: port 1(team0) entered disabled state
[  256.062125][T11935] sctp: [Deprecated]: syz.0.1632 (pid 11935) Use of int in max_burst socket option.
[  256.062125][T11935] Use struct sctp_assoc_value instead
[  256.101854][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.108556][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.120472][T11941] xt_CT: You must specify a L4 protocol and not use inversions on it
[  256.120704][T11939] netlink: 'syz.2.1634': attribute type 10 has an invalid length.
[  256.130788][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'.
[  256.150245][T11939] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  256.444548][   T29] audit: type=1800 audit(1741943800.083:2): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1637" name="memory.events" dev="tmpfs" ino=1549 res=0 errno=0
[  256.517463][   T29] audit: type=1804 audit(1741943800.123:3): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1637" name="memory.events" dev="tmpfs" ino=1549 res=1 errno=0
[  257.504851][T11996] netlink: 'syz.2.1646': attribute type 1 has an invalid length.
[  257.571022][T11998] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1649'.
[  257.583016][T12000] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1649'.
[  257.736925][T12007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  257.952815][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'.
[  258.043569][T12027] netlink: 'syz.0.1655': attribute type 10 has an invalid length.
[  258.062735][T12027] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  258.148986][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'.
[  258.275280][T12024] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1654'.
[  258.302254][T12037] netlink: 'syz.3.1656': attribute type 2 has an invalid length.
[  258.367120][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  258.428942][T12037] fþ²¹¥‰: entered promiscuous mode
[  258.439910][T12046] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.462012][T12046] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.825250][T12066] bond3: entered promiscuous mode
[  258.846507][T12066] 8021q: adding VLAN 0 to HW filter on device bond3
[  259.096989][T12066] bond3 (unregistering): Released all slaves
[  259.592069][T12123] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[  260.548305][T12169] netlink: 'syz.1.1692': attribute type 3 has an invalid length.
[  260.568070][T12169] __nla_validate_parse: 6 callbacks suppressed
[  260.568094][T12169] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1692'.
[  260.985034][T12180] xt_TCPMSS: Only works on TCP SYN packets
[  261.040039][T12184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'.
[  261.999545][T12202] xt_ecn: cannot match TCP bits for non-tcp packets
[  262.186364][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'.
[  262.426721][T12191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'.
[  262.691436][T12217] xt_TPROXY: Can be used only with -p tcp or -p udp
[  262.717843][T12217] ieee802154 phy0 wpan0: encryption failed: -22
[  262.785535][T12218] xt_hashlimit: size too large, truncated to 1048576
[  262.872661][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'.
[  262.882685][T12219] xt_hashlimit: size too large, truncated to 1048576
[  263.200673][T12222] bond4: entered promiscuous mode
[  263.224165][T12222] bond4: entered allmulticast mode
[  263.229993][T12222] 8021q: adding VLAN 0 to HW filter on device bond4
[  263.259202][T12238] netlink: 'syz.0.1707': attribute type 10 has an invalid length.
[  263.399255][T12225] team0: Port device batadv0 removed
[  263.410509][T12225] bond2: (slave geneve2): Releasing active interface
[  263.422527][T12225] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.432340][T12225] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.441838][T12225] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.450841][T12225] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.463409][T12225] bond0: (slave bond3): Releasing backup interface
[  263.478451][T12225] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  263.485913][T12225] batman_adv: batadv0: Removing interface: ip6gretap1
[  263.497005][T12220] 
: renamed from bond0
[  263.507455][T12234] team0: entered allmulticast mode
[  263.512853][T12234] team_slave_0: entered allmulticast mode
[  263.534074][T12234] team_slave_1: entered allmulticast mode
[  263.543309][T12234] geneve0: entered allmulticast mode
[  263.567886][T12238] team0: Device veth1_vlan failed to register rx_handler
[  264.470481][T12282] tc_dump_action: action bad kind
[  264.543669][T12286] netlink: 'syz.0.1721': attribute type 4 has an invalid length.
[  264.587347][T12286] netlink: 'syz.0.1721': attribute type 4 has an invalid length.
[  264.646684][T12290] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  264.768128][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'.
[  264.777966][T12300] xt_hashlimit: size too large, truncated to 1048576
[  264.820050][T12305] 8021q: VLANs not supported on wg1
[  264.854684][T12305] xt_hashlimit: size too large, truncated to 1048576
[  264.916386][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'.
[  264.956755][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'.
[  265.171050][T12317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1730'.
[  265.363198][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'.
[  265.388478][T12326] nbd: illegal input index -381222912
[  265.416894][T12324] IPVS: set_ctl: invalid protocol: 28514 48.0.0.0:0
[  265.879868][T12348] netlink: 'syz.2.1739': attribute type 178 has an invalid length.
[  265.938758][T12354] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[  266.079465][T12354] 8021q: adding VLAN 0 to HW filter on device bond6
[  266.225309][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'.
[  267.079396][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[  267.526771][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'.
[  267.661303][T12406] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1754'.
[  267.706539][T12407] xt_hashlimit: Unknown mode mask 40030000, kernel too old?
[  267.779674][T12411] 
[  267.782089][T12411] ======================================================
[  267.789140][T12411] WARNING: possible circular locking dependency detected
[  267.796382][T12411] 6.14.0-rc5-syzkaller-01215-g89d75c4c67ac #0 Not tainted
[  267.803553][T12411] ------------------------------------------------------
[  267.810684][T12411] syz.0.1756/12411 is trying to acquire lock:
[  267.816780][T12411] ffff88805df98d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50
[  267.827216][T12411] 
[  267.827216][T12411] but task is already holding lock:
[  267.834767][T12411] ffff88805de78d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0
[  267.844642][T12411] 
[  267.844642][T12411] which lock already depends on the new lock.
[  267.844642][T12411] 
[  267.855047][T12411] 
[  267.855047][T12411] the existing dependency chain (in reverse order) is:
[  267.864062][T12411] 
[  267.864062][T12411] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}:
[  267.872512][T12411]        lock_acquire+0x1ed/0x550
[  267.877558][T12411]        __mutex_lock+0x19c/0x1010
[  267.882680][T12411]        __dev_open+0x5cb/0x8a0
[  267.887541][T12411]        netif_open+0xae/0x1b0
[  267.892315][T12411]        dev_open+0x13e/0x260
[  267.897003][T12411]        team_add_slave+0xabe/0x28a0
[  267.902294][T12411]        do_set_master+0x579/0x730
[  267.907411][T12411]        do_setlink+0xfee/0x40f0
[  267.912362][T12411]        rtnl_newlink+0x15a6/0x1d90
[  267.917571][T12411]        rtnetlink_rcv_msg+0x791/0xcf0
[  267.923091][T12411]        netlink_rcv_skb+0x206/0x480
[  267.928390][T12411]        netlink_unicast+0x7f6/0x990
[  267.933686][T12411]        netlink_sendmsg+0x8de/0xcb0
[  267.939080][T12411]        __sock_sendmsg+0x221/0x270
[  267.944288][T12411]        ____sys_sendmsg+0x53a/0x860
[  267.949662][T12411]        __sys_sendmsg+0x269/0x350
[  267.955037][T12411]        do_syscall_64+0xf3/0x230
[  267.960174][T12411]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.966600][T12411] 
[  267.966600][T12411] -> #1 (team->team_lock_key#4){+.+.}-{4:4}:
[  267.974791][T12411]        lock_acquire+0x1ed/0x550
[  267.979921][T12411]        __mutex_lock+0x19c/0x1010
[  267.985041][T12411]        team_set_mac_address+0x122/0x280
[  267.990774][T12411]        netif_set_mac_address+0x327/0x510
[  267.996597][T12411]        do_setlink+0xaa6/0x40f0
[  268.001550][T12411]        rtnl_newlink+0x15a6/0x1d90
[  268.006774][T12411]        rtnetlink_rcv_msg+0x791/0xcf0
[  268.012243][T12411]        netlink_rcv_skb+0x206/0x480
[  268.017722][T12411]        netlink_unicast+0x7f6/0x990
[  268.023036][T12411]        netlink_sendmsg+0x8de/0xcb0
[  268.028338][T12411]        __sock_sendmsg+0x221/0x270
[  268.033545][T12411]        __sys_sendto+0x363/0x4c0
[  268.038674][T12411]        __x64_sys_sendto+0xde/0x100
[  268.043963][T12411]        do_syscall_64+0xf3/0x230
[  268.049107][T12411]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.056054][T12411] 
[  268.056054][T12411] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}:
[  268.064609][T12411]        validate_chain+0x18ef/0x5920
[  268.070169][T12411]        __lock_acquire+0x1397/0x2100
[  268.075573][T12411]        lock_acquire+0x1ed/0x550
[  268.080639][T12411]        __mutex_lock+0x19c/0x1010
[  268.085846][T12411]        dev_set_mac_address+0x2a/0x50
[  268.091329][T12411]        bond_set_mac_address+0x28e/0x830
[  268.097070][T12411]        netif_set_mac_address+0x327/0x510
[  268.102934][T12411]        do_setlink+0xaa6/0x40f0
[  268.107926][T12411]        rtnl_newlink+0x15a6/0x1d90
[  268.113147][T12411]        rtnetlink_rcv_msg+0x791/0xcf0
[  268.118680][T12411]        netlink_rcv_skb+0x206/0x480
[  268.124070][T12411]        netlink_unicast+0x7f6/0x990
[  268.129366][T12411]        netlink_sendmsg+0x8de/0xcb0
[  268.134665][T12411]        __sock_sendmsg+0x221/0x270
[  268.139984][T12411]        ____sys_sendmsg+0x53a/0x860
[  268.145389][T12411]        __sys_sendmsg+0x269/0x350
[  268.150537][T12411]        do_syscall_64+0xf3/0x230
[  268.155599][T12411]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.162070][T12411] 
[  268.162070][T12411] other info that might help us debug this:
[  268.162070][T12411] 
[  268.172411][T12411] Chain exists of:
[  268.172411][T12411]   &dev_instance_lock_key#12 --> team->team_lock_key#4 --> &dev_instance_lock_key#2
[  268.172411][T12411] 
[  268.187696][T12411]  Possible unsafe locking scenario:
[  268.187696][T12411] 
[  268.195242][T12411]        CPU0                    CPU1
[  268.200614][T12411]        ----                    ----
[  268.205979][T12411]   lock(&dev_instance_lock_key#2);
[  268.211221][T12411]                                lock(team->team_lock_key#4);
[  268.218813][T12411]                                lock(&dev_instance_lock_key#2);
[  268.226568][T12411]   lock(&dev_instance_lock_key#12);
[  268.231965][T12411] 
[  268.231965][T12411]  *** DEADLOCK ***
[  268.231965][T12411] 
[  268.240116][T12411] 2 locks held by syz.0.1756/12411:
[  268.245320][T12411]  #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90
[  268.254424][T12411]  #1: ffff88805de78d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0
[  268.264574][T12411] 
[  268.264574][T12411] stack backtrace:
[  268.270488][T12411] CPU: 1 UID: 0 PID: 12411 Comm: syz.0.1756 Not tainted 6.14.0-rc5-syzkaller-01215-g89d75c4c67ac #0
[  268.270512][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  268.270524][T12411] Call Trace:
[  268.270533][T12411]  <TASK>
[  268.270541][T12411]  dump_stack_lvl+0x241/0x360
[  268.270566][T12411]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.270586][T12411]  ? __pfx__printk+0x10/0x10
[  268.270607][T12411]  print_circular_bug+0x13a/0x1b0
[  268.270630][T12411]  check_noncircular+0x36a/0x4a0
[  268.270652][T12411]  ? __pfx_check_noncircular+0x10/0x10
[  268.270672][T12411]  ? lockdep_lock+0x123/0x2b0
[  268.270701][T12411]  validate_chain+0x18ef/0x5920
[  268.270731][T12411]  ? __pfx_validate_chain+0x10/0x10
[  268.270751][T12411]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  268.270780][T12411]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  268.270797][T12411]  ? lockdep_hardirqs_on+0x99/0x150
[  268.270818][T12411]  ? mark_lock+0x9a/0x360
[  268.270836][T12411]  ? __lock_acquire+0x1397/0x2100
[  268.270866][T12411]  ? mark_lock+0x9a/0x360
[  268.270883][T12411]  __lock_acquire+0x1397/0x2100
[  268.270916][T12411]  lock_acquire+0x1ed/0x550
[  268.270940][T12411]  ? dev_set_mac_address+0x2a/0x50
[  268.270960][T12411]  ? __pfx_lock_acquire+0x10/0x10
[  268.270994][T12411]  ? __pfx___might_resched+0x10/0x10
[  268.271018][T12411]  ? dev_set_mac_address+0x42/0x50
[  268.271034][T12411]  ? __pfx_lock_release+0x10/0x10
[  268.271061][T12411]  __mutex_lock+0x19c/0x1010
[  268.271082][T12411]  ? dev_set_mac_address+0x2a/0x50
[  268.271098][T12411]  ? notifier_call_chain+0x3cc/0x3f0
[  268.271123][T12411]  ? __mutex_unlock_slowpath+0x227/0x800
[  268.271145][T12411]  ? dev_set_mac_address+0x2a/0x50
[  268.271161][T12411]  ? __pfx___mutex_lock+0x10/0x10
[  268.271182][T12411]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  268.271206][T12411]  ? net_generic+0x1f/0x240
[  268.271226][T12411]  ? net_generic+0x1f0/0x240
[  268.271247][T12411]  dev_set_mac_address+0x2a/0x50
[  268.271264][T12411]  bond_set_mac_address+0x28e/0x830
[  268.271289][T12411]  ? __pfx_bond_set_mac_address+0x10/0x10
[  268.271309][T12411]  ? hsr_netdev_notify+0x295/0xb50
[  268.271335][T12411]  ? notifier_call_chain+0x15a/0x3f0
[  268.271360][T12411]  ? notifier_call_chain+0x3cc/0x3f0
[  268.271386][T12411]  netif_set_mac_address+0x327/0x510
[  268.271406][T12411]  ? __pfx_netif_set_mac_address+0x10/0x10
[  268.271426][T12411]  ? rcu_is_watching+0x15/0xb0
[  268.271445][T12411]  ? trace_kmalloc+0x1f/0xd0
[  268.271468][T12411]  ? do_setlink+0x7a7/0x40f0
[  268.271496][T12411]  do_setlink+0xaa6/0x40f0
[  268.271530][T12411]  ? mark_lock+0x9a/0x360
[  268.271547][T12411]  ? __pfx_do_setlink+0x10/0x10
[  268.271572][T12411]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  268.271599][T12411]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  268.271628][T12411]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  268.271645][T12411]  ? lockdep_hardirqs_on+0x99/0x150
[  268.271664][T12411]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  268.271682][T12411]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.271702][T12411]  ? rcu_is_watching+0x15/0xb0
[  268.271722][T12411]  ? __mutex_lock+0xba3/0x1010
[  268.271743][T12411]  ? __mutex_lock+0x602/0x1010
[  268.271765][T12411]  ? rtnl_newlink+0xc4c/0x1d90
[  268.271789][T12411]  ? __pfx___mutex_lock+0x10/0x10
[  268.271814][T12411]  ? ns_capable+0x8a/0xf0
[  268.271834][T12411]  ? rtnl_link_get_net_capable+0x168/0x340
[  268.271863][T12411]  rtnl_newlink+0x15a6/0x1d90
[  268.271887][T12411]  ? is_bpf_text_address+0x285/0x2a0
[  268.271903][T12411]  ? is_bpf_text_address+0x26/0x2a0
[  268.271924][T12411]  ? __pfx_rtnl_newlink+0x10/0x10
[  268.271949][T12411]  ? __pfx_validate_chain+0x10/0x10
[  268.271980][T12411]  ? validate_chain+0x11e/0x5920
[  268.271999][T12411]  ? __pfx_lock_acquire+0x10/0x10
[  268.272025][T12411]  ? __pfx_lock_release+0x10/0x10
[  268.272052][T12411]  ? __pfx_validate_chain+0x10/0x10
[  268.272071][T12411]  ? mark_lock+0x9a/0x360
[  268.272088][T12411]  ? __lock_acquire+0x1397/0x2100
[  268.272126][T12411]  ? __pfx_lock_release+0x10/0x10
[  268.272157][T12411]  ? __pfx_rtnl_newlink+0x10/0x10
[  268.272182][T12411]  rtnetlink_rcv_msg+0x791/0xcf0
[  268.272205][T12411]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  268.272231][T12411]  ? __lock_acquire+0x1397/0x2100
[  268.272257][T12411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  268.272288][T12411]  netlink_rcv_skb+0x206/0x480
[  268.272313][T12411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  268.272338][T12411]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.272370][T12411]  ? netlink_deliver_tap+0x2e/0x1b0
[  268.272395][T12411]  netlink_unicast+0x7f6/0x990
[  268.272419][T12411]  ? __pfx_netlink_unicast+0x10/0x10
[  268.272439][T12411]  ? __virt_addr_valid+0x45f/0x530
[  268.272456][T12411]  ? __phys_addr_symbol+0x2f/0x70
[  268.272472][T12411]  ? __check_object_size+0x47a/0x730
[  268.272496][T12411]  netlink_sendmsg+0x8de/0xcb0
[  268.272526][T12411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.272552][T12411]  ? aa_sock_msg_perm+0x91/0x160
[  268.272580][T12411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.272604][T12411]  __sock_sendmsg+0x221/0x270
[  268.272629][T12411]  ____sys_sendmsg+0x53a/0x860
[  268.272650][T12411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.272668][T12411]  ? __fget_files+0x2a/0x410
[  268.272693][T12411]  ? __fget_files+0x2a/0x410
[  268.272721][T12411]  __sys_sendmsg+0x269/0x350
[  268.272741][T12411]  ? __pfx___sys_sendmsg+0x10/0x10
[  268.272776][T12411]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  268.272803][T12411]  ? do_syscall_64+0x100/0x230
[  268.272825][T12411]  ? do_syscall_64+0xb6/0x230
[  268.272847][T12411]  do_syscall_64+0xf3/0x230
[  268.272868][T12411]  ? clear_bhb_loop+0x35/0x90
[  268.272893][T12411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.272917][T12411] RIP: 0033:0x7f10bad8d169
[  268.272933][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.272948][T12411] RSP: 002b:00007f10bbbb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.272968][T12411] RAX: ffffffffffffffda RBX: 00007f10bafa5fa0 RCX: 00007f10bad8d169
[  268.273004][T12411] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000003
[  268.273015][T12411] RBP: 00007f10bae0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  268.273026][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.273037][T12411] R13: 0000000000000000 R14: 00007f10bafa5fa0 R15: 00007ffd3b4f6268
[  268.273055][T12411]  </TASK>
[  268.950797][T12411] bond0: entered promiscuous mode
[  268.957272][T12411] bond_slave_0: entered promiscuous mode
[  268.961084][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'.
[  268.965407][T12411] bond_slave_1: entered promiscuous mode
[  268.972294][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'.
[  268.978191][T12411] bond1: entered promiscuous mode
[  268.991859][T12411] team0: entered promiscuous mode
[  268.997235][T12411] team_slave_0: entered promiscuous mode
[  269.003135][T12411] team_slave_1: entered promiscuous mode
[  269.009781][T12411] geneve0: entered promiscuous mode
[  269.015506][T12411] dummy0: entered promiscuous mode